{ "Event": { "published": true, "date": "2024-10-01", "threat_level_id": 2, "info": "URLhaus IOCs for 2024-10-01", "timestamp": 1727827392, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "4807c066-9f6e-40c1-9966-e7db952601e3", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1727740990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727740990, "uuid": "d6610019-30d1-4e07-822c-c21bdfa86f64", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727740990, "uuid": "84893732-0e35-4447-8c3b-073b557617e3", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727740990, "uuid": "77532750-b9cc-40a9-aa8b-768472754ead", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727740990, "uuid": "21dafab5-d8fe-4e59-848b-00452f145ed3", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727740990, "uuid": "e8db7242-b051-44ea-a2c7-93facc5d8c1d", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a922ac58-7f88-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727741040, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741040, "uuid": "7959dc50-b2d2-4df9-8c91-b4473e57cb58", "comment": "Malware payload", "value": "71837e6b27c00f12fcf00bf6da6d6738", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741040, "uuid": "d8350481-4921-41ba-927f-4dfca2fa89ba", "comment": "Malware payload", "value": "9d24481c43dfc9d8370bdd2681255758097a474af5c4f73b4e460e28a2d761a8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727741040, "uuid": "c71b0b61-4584-4599-bed6-1115a4330e81", "value": "T1540319A5BD90AB62C5C425FAF54E428C33131778DAE732039E144F3475EB99E0E3E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727741040, "uuid": "5d0a905b-f939-43bd-8996-d05e826df032", "value": "768:6/cKuK1fkJ1fRj53J+zo6N1iY2nrlRdcLnz4tQ17vj4w8FUXm/ESfg3vQyOt:6/cKu0yzj53J+zo+sDnrjKLz0c0bkfPw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727741040, "uuid": "50435526-de08-492f-8622-46e4b8ebd3d6", "value": 37796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727741040, "uuid": "5789f79a-3637-4337-8603-4837bf8948c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1727741046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741046, "uuid": "c675b49f-a347-4c0a-ba71-c702db41b0fb", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741046, "uuid": "9e015e3d-e70d-4051-9301-92b5751c214b", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727741046, "uuid": "48c9c1f3-c9f2-4a15-90be-dde42869e6fd", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727741046, "uuid": "06f418eb-10db-42a4-a5e7-a6e25123a5fe", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727741046, "uuid": "25043510-0fe6-4046-b909-a08ae0c97cbd", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1727741108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741108, "uuid": "c2523a36-71c1-4021-bb75-9f5ca6cc254c", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741108, "uuid": "3e868fa2-fc56-4a9f-9db0-53672efc9b40", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727741108, "uuid": "4a95f974-6171-428a-a933-762b456b97ed", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727741108, "uuid": "fdd49947-f96e-4414-94c2-cbf1e813b8f1", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727741108, "uuid": "43ab6f9b-5ce2-4546-875d-dcb11216240a", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4e57e50-7f89-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727741489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741489, "uuid": "eea26faa-e0be-4663-83d0-b5caef6a0d97", "comment": "Malware payload", "value": "5ba1f3f1e6140e73b3f1d44eeeb155fb", "object_relation": "md5", "Tag": [ { "name": "AndeLoader", "colour": "#5BB544", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741489, "uuid": "4cd0a5d0-0bcb-49f3-9c3f-77c8d9370306", "comment": "Malware payload", "value": "24da860042f9696976effc835cd771767846cb502bee8fb3ec024abf23c4c739", "object_relation": "sha256", "Tag": [ { "name": "AndeLoader", "colour": "#5BB544", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727741489, "uuid": "8c011c08-90ec-4486-9263-0666c1e3c150", "value": "T1DA42B7369E23FCC067BE3E40E44829561CC93A1787785678FB88056628F6541EF1ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727741489, "uuid": "f766611e-195f-428c-a024-03a1f96b94f3", "value": "384:g66sD0NoJ4eAGnGUnXBAhqrJ9hspmAs06SWz:X6sDKoGSXQqrNspk06SWz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727741489, "uuid": "7bca7116-68a7-4de6-ab03-9279ef18cbc9", "value": 12972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727741489, "uuid": "c02f783a-e06a-41e4-aa55-63b51677834c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0d43283-7f8b-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1727742395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742395, "uuid": "b20d1df2-9b70-4dd6-a9c5-1de166a77898", "comment": "Malware payload (GCleaner)", "value": "8d646fcf7e06002f476b3ada8ac1feff", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742395, "uuid": "0e98daba-a780-4c29-b2ea-38f653b07b8d", "comment": "Malware payload (GCleaner)", "value": "88c71791587f9a3994c59a50e3b236954b8d348f75e2dccb4137256938515b79", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742395, "uuid": "237567ac-105e-44e7-9936-3a6bac3a8bc2", "value": "T19D54AC2272F192A6EEF74B326971F7901ABBBCF76731419E2250361E2D3739089657", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742395, "uuid": "ad8e64b3-e02b-473d-95c0-5fbb160eb1d4", "value": "abd58e636146ae1edca4aa616a47bb50", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742395, "uuid": "83254d35-8925-4e30-a997-0732c813c488", "value": "6144:npLhYgz2wMn8J3aFe+k1ClqUOPzNRO9LXTZeyo85XT:nptBiw2k1ClaJMTrzt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727742395, "uuid": "7daf8bbe-09bd-46b5-b69f-ffa1694f8d89", "value": 305664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742395, "uuid": "7040c0a5-d0dd-4144-8a50-cacdad1e7213", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43faf684-7f8c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1727742588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742588, "uuid": "c243eec3-f400-4756-9e47-6301db9943f9", "comment": "Malware payload (Smoke Loader)", "value": "fb804bd0a423acce8fb10e91fa9698c3", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742588, "uuid": "989b3944-14f3-4891-822f-5b314aa45265", "comment": "Malware payload (Smoke Loader)", "value": "a1e752b4fef7ca5272476d639c901d7fa5fef328bf5063b31131458a77e661af", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742588, "uuid": "72b2116e-32bc-4013-914e-a5f3089605d9", "value": "T100244A113AF192A5EFE747356531FB941ABBBCFAAB7180AE2240321F2D3739089553", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742588, "uuid": "aaae0111-30e9-4fed-ace0-0a4bc9ea9161", "value": "abd58e636146ae1edca4aa616a47bb50", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742588, "uuid": "a3aa9e9d-ccdd-4ec6-aa09-40ccee65b844", "value": "3072:8aLB7RY9RdEFWPVmefEAOGt13yYOkjb5MlY8ZeyrgdRMs3j42:8aLlRgvEFKVtfIy1iBvTZeyUXT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727742588, "uuid": "1f7c1982-a0ad-44d7-8a61-4f7c6c3203f3", "value": 220672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742588, "uuid": "98e68248-a95c-43a5-9669-d1e7ac26dd7a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6b64f5c-7f8c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1727742861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742861, "uuid": "a53435cf-0c33-4592-aac8-b594c4e3d94b", "comment": "Malware payload (Stealc)", "value": "e9938366e3f20d6ad46e657a75a4e546", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742861, "uuid": "85bdbf69-c61d-470a-8255-7108ac652d6c", "comment": "Malware payload (Stealc)", "value": "eeecbbe4278acf7e7ac8b6cd2afdf548280627c80cdb226edf2cd45aea30f065", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742861, "uuid": "3d772e31-5ae9-486c-9d51-2665287391da", "value": "T1B564AD1076F186B2EEF74B356971F7941ABBBCF6AA70808E2240361F2D3739189553", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742861, "uuid": "ed9975dc-dae3-4549-82ef-8ca3c8cc74b7", "value": "abd58e636146ae1edca4aa616a47bb50", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742861, "uuid": "c341287a-a58a-4412-8f8e-fffe538db098", "value": "6144:NMLpBH//wyzaBdgptiX5C9rKjvBezibDCDfPS+2xyoP//nTZeyEXT:NM1BnwyrtKs9gqWCDH/2JnfTrg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727742861, "uuid": "955570b6-c129-46e7-b66b-e0d4d161ca19", "value": 335360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742861, "uuid": "f9b5badf-b9d7-4197-acda-15ff39e014ee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "831d722b-7f8d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727743123, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727743123, "uuid": "4b9c7af9-93e5-40f8-a6c5-4701c61890f3", "comment": "Malware payload", "value": "2826f2d9624ebb63b7b86c6ae8440d8f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727743123, "uuid": "b951386a-bbe5-4757-a506-96384841f7b0", "comment": "Malware payload", "value": "525dcb7c19b60aadf5fe73122e929e78aa4418c19529b52ee164fd0662ccfdf5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727743123, "uuid": "387d9fa4-5b80-4781-906c-b67671a48765", "value": "T1D0334A91EF804FAFC07ECF30859D422745A8CA9B96E395657A3CCD84F9A9644C743F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727743123, "uuid": "944d2a22-9d1a-4ee4-9064-fa2851811d52", "value": "1536:7RiQAHCzQJZ6XqmLym4UEbg6zqFdz8IhIrY:cQoCPl4UEbgWqFdzP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727743123, "uuid": "5537872d-2009-4587-b095-2777cd954c46", "value": 50956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727743123, "uuid": "27470af1-ce78-4b6b-82cc-574ea08fcecd", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "481208d8-7f8e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1727743454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727743454, "uuid": "97e8015d-6430-4a1d-a742-0814424f22f1", "comment": "Malware payload (Stealc)", "value": "3666859fb5b5e5a951c46629139a94f5", "object_relation": "md5", "Tag": [ { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727743454, "uuid": "58f0e2f3-fd95-4cb8-b8bf-581011e56c3e", "comment": "Malware payload (Stealc)", "value": "ce91909ba4cc606a4fe16e7b55b42e00c0d264415cf68f784b6e8bd197622f11", "object_relation": "sha256", "Tag": [ { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727743454, "uuid": "b99a5130-68a4-46aa-a8c4-a23a140ff9fe", "value": "T14295339B9226E0B8D91AE673D8F651076DA03FFE6A3170661DB14338834BEC5F3319", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727743454, "uuid": "7cb76b54-5bdf-4e0e-89a9-298a7f5b56de", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727743454, "uuid": "58cbe1e6-6e4e-4bad-885e-8c01a3ffadaa", "value": "49152:BxFCQz87tHXixMWDbtAr5O/GguTrBHWbz:B7CCAyxMYbtk5O/iT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727743454, "uuid": "a1f4e510-368f-4d38-83e6-caa17501d818", "value": 1881088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727743454, "uuid": "de96d6b0-3b71-4f47-a980-78b435c9ec39", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4054d2c0-7f90-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1727744300, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727744300, "uuid": "bb6cc7ac-3ef7-4d06-96dc-ffb24efc164a", "comment": "Malware payload (GCleaner)", "value": "b0837166cff92b061636c23f5c0575f0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727744300, "uuid": "5e8a1099-f033-45e0-9661-06283af45102", "comment": "Malware payload (GCleaner)", "value": "1bc494e04bb41e754b1b1b867e0d1af9ada161b11bc4bb0f1859ce7c431eed96", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727744300, "uuid": "c1818b87-931c-42c2-b4f3-722f47720edc", "value": "T186449D1036F192A2EEF747316A31FBA419BBBCF667B0919E2110361F2D737A189563", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727744300, "uuid": "f2e9145d-494f-41cb-8808-3539f937d876", "value": "abd58e636146ae1edca4aa616a47bb50", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727744300, "uuid": "1fc5241e-f949-4b42-9d7f-a1f3ef363009", "value": "6144:IKuLHDwL0WVe3Mid4UXy+LKgTZeyMNXT:IKuDDbWA3bpYgTrMp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727744300, "uuid": "9ae833ed-c66d-4038-ac2e-9752f313182d", "value": 278016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727744300, "uuid": "266bb017-cf4b-41ac-ae45-2177fc623a0f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf23420e-7f6e-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1727745335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727745335, "uuid": "5ba1fe86-343e-47e9-9c21-9e2cfd3ced3f", "comment": "Malware payload (Stealc)", "value": "8c264372815b0fc79b4599636155008e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727745335, "uuid": "370f4232-d226-443e-81e5-eea044acdd81", "comment": "Malware payload (Stealc)", "value": "5cf4d28a42aa63b396569800629a783c88a29dab861df8dc1614a5b64d554a1b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727745335, "uuid": "121ecc9c-e9ea-4670-a13e-2e93f49f6b28", "value": "T12164CEAC726072EFC857C4769E981C68FA5074BB830F4253A42725EDAA0C99BCF545", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727745335, "uuid": "62269667-0913-4301-9cea-07c215e26463", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727745335, "uuid": "39ec4322-92fd-468f-a3d2-8326caac4b83", "value": "6144:u1W56WsHU0p18EUFL62ywTYoaJtX30PhAxS2T72hjyixF7+CMQ8L:5+0AUKqYoaJ930Pg8r7+CMQ8L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727745335, "uuid": "9af580be-519b-44ef-b919-f0a1348a7825", "value": 331776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727745335, "uuid": "5260f4e9-d08b-4214-880f-dba4b2806814", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "411b7d94-7f9a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1727748596, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727748596, "uuid": "36d2beb2-92ed-4324-b44f-0a869d30fdf9", "comment": "Malware payload (Amadey)", "value": "8c4772d359eaac1715def43cfa7f7e92", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ZharkBot", "colour": "#326594", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727748596, "uuid": "7d806a44-2f93-4a27-a594-69394b2db14f", "comment": "Malware payload (Amadey)", "value": "1f1ddf660bd7283fb394d2d7c56fd7d3cf30f0ba2e8798493a8d72e867d31d98", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ZharkBot", "colour": "#326594", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727748596, "uuid": "91413d53-4737-4866-8e64-b77373ab0a8c", "value": "T10C9533A84F70BD5FC229B87A71ED60BC4727F581886E94D6AF39391606CF7583608F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727748596, "uuid": "f32b19f1-afa0-432d-be51-3d8683336b76", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727748596, "uuid": "21a86336-3ff1-4f05-87ca-add181007ac2", "value": "49152:R+CJo4mjHGAKABU84ayBKyjq88Jql2CxrBT:fy4mjmAKUUP458u+dT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727748596, "uuid": "c3a1fafd-3c53-4913-a0ef-609d88fcc885", "value": 1882112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727748596, "uuid": "6e7293be-758b-49c1-81e5-d6179012ffa0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38e57f41-7f9b-11ef-afe5-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1727749012, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749012, "uuid": "0890f508-4ca1-41d0-a2e3-a45da15459c2", "comment": "Malware payload (Smoke Loader)", "value": "e9a584920c4eef578c684c1eee0f11a7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749012, "uuid": "59889823-7971-467a-b93f-b8d67201317f", "comment": "Malware payload (Smoke Loader)", "value": "9a375d6a79353978749dc8f75a899bc629ccdac05e3c1e517b2bfe4e52e8073d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727749012, "uuid": "9118d271-a28b-432b-aa69-cc8405870ee9", "value": "T1C92439113EF982A5EAF747367931FB9419BBBCF67670409E22003A1FA93739089567", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727749012, "uuid": "93ded24e-dc58-41dd-8765-6243bb021b60", "value": "abd58e636146ae1edca4aa616a47bb50", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727749012, "uuid": "b8bbf56f-044c-4908-8c4d-acef756c303d", "value": "3072:baLB7REBIuc6hVDWRhUe6VXVb5jlY8Zeyrg/hFMs3j42:baLlR3ucyDWvIVVTZey8XT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727749012, "uuid": "b07b97c5-ba23-4e17-a2a9-1c25f03e34f1", "value": 220160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727749012, "uuid": "de7f853c-6605-4429-8d63-cd3230329a08", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1727749811, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749811, "uuid": "83cb2aa7-02f4-4124-b2ba-d4b78361219d", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749811, "uuid": "a434d587-019e-431a-bce6-55a74274e96a", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727749811, "uuid": "1a7b6fa1-22b3-4a00-b518-33ac6795f547", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727749811, "uuid": "4e52a062-ce6a-4bdb-b40d-0dc675e32e0d", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727749811, "uuid": "f6dd0a47-1a9a-4092-a309-0afa7732ac1c", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54151cd4-7fa0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727751205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751205, "uuid": "d4013711-a884-4837-86e1-e485f5789982", "comment": "Malware payload", "value": "e066330aa7707311973359a0d89ace62", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751205, "uuid": "08e57b9d-3c3a-496f-9cce-4f01dd626400", "comment": "Malware payload", "value": "78d2eae05bd8ae1972067018f60f028ada939b19e4b0f2092a004fb25751b120", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751205, "uuid": "902f500a-c163-445e-88c4-10fbbdcabb7c", "value": "T1C5E32A46BA418A47C4D11776BE9F42463323EF64D3E73306CA2C5FB43F867AA0D66A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751205, "uuid": "723dd28a-63bf-485a-a74f-d3347875297a", "value": "1536:QqnEdwmh2n8QR7w2uYTMdCj/tw1YFvh+3MClhSiswBXt7sNGQryrD14y7iGO+FoE:028GI9Cj1w1YFvhslBXpsNGQm1V7FQDo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727751205, "uuid": "be47c85e-e082-4b5a-bb11-044bfd957b95", "value": 151025, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751205, "uuid": "04ed28be-92e6-41b9-8b62-e464c2455f6a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72b33239-7fa0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727751256, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751256, "uuid": "3f15abf9-26ed-4d2c-8e9f-867f02daa514", "comment": "Malware payload", "value": "4e25f5255e07ea1e064b5babb2ba6b87", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751256, "uuid": "a0fb9a4f-4b7f-4ed9-b6ad-05a7273aa829", "comment": "Malware payload", "value": "95d9c7492c83b9850927ce5e93605ff36e3a7966dbec52a09a57fd9fe3ebeb64", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751256, "uuid": "5e0d64b3-6350-4c65-84b6-b49c2393746d", "value": "T1CF932A46B9819B49D4D423BAFE1E528A33435FBCD3FA7213CD140F256BC996B0E769", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751256, "uuid": "058894a3-3c5e-40db-9587-76dc351bcded", "value": "1536:kqnEdwmhAn8QR7w2uYTMdCj/tw1YFvh+3MClhSiswBXt7s:AA8GI9Cj1w1YFvhslBXps", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727751256, "uuid": "2f14e538-002f-4b30-a7d3-e8bbbbdead3f", "value": 94564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751256, "uuid": "dcbc13f4-313e-4e03-8e72-bcdd83e1f178", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9359e151-7fa2-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727752170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727752170, "uuid": "427095c6-655c-4590-a9f5-358494d723cc", "comment": "Malware payload", "value": "d2d58e8f2cb05f619ccc5dbc7c24893c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727752170, "uuid": "eb0cdb52-197d-4146-8d13-1857a9a930df", "comment": "Malware payload", "value": "0c222c15c38c98a554dd240458136ac607afa10eefe4f409392a43bfb459cfbb", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727752170, "uuid": "df4c7cb7-6c2d-4306-b7ba-a03e2e82f530", "value": "T12573284278A69A8BC5D413F7F71D428933176FB4C2EA3202CE199F157B8E85F1B3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727752170, "uuid": "7c2093ec-1283-432b-a908-0cf62387ffef", "value": "1536:x6kcbNwx7YwLeONkBhdyVBS/WKHeJZfvUyFOssYD:xJ+Nwx73ejbso/WOez3PFOssY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727752170, "uuid": "fb8ccb72-176b-49bb-9913-2cbd02d25a42", "value": 80424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727752170, "uuid": "361c535f-5857-49e8-a520-b10f47402029", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe75c9b6-7fa6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727754068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754068, "uuid": "5e352e0d-b9f6-41cd-a116-768f323a6cc2", "comment": "Malware payload", "value": "f748c57d0e972df53572ea0a79eaa14f", "object_relation": "md5", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754068, "uuid": "1f319e92-ef25-421d-9caf-85bb2610dcec", "comment": "Malware payload", "value": "a71a2093c3a51be7f836a940414673119823416a440b5773bdf3b0bc96b68a9e", "object_relation": "sha256", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754068, "uuid": "1bab889b-0184-4bce-b4b3-33ad0764952b", "value": "T1DD94230FDC87E0D34E96627419D74A196FF2D0D0D0057DBCCA91A1AA1F96A8EBC9DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754068, "uuid": "548e92c8-05c5-40b8-b2c6-68e2d6282d5b", "value": "12288:oEbjnujN6VB+EphKWw/qI29a1l/Z8uo5Aj46o:Tb7YN6VB+ELKWE29y/ZTuE46o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727754068, "uuid": "b740df17-4bb6-4a1f-83e0-8b005d3b2ac9", "value": 414506, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754068, "uuid": "ebd78493-0ed9-47ae-9c70-226228de7919", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7370853e-7fa0-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1727754219, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754219, "uuid": "bb4eeb57-d18c-4f00-8a12-3fc19e7c2632", "comment": "Malware payload (Amadey)", "value": "61dac31c9bf2f33144b3d77b9a72d44e", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754219, "uuid": "bbf39e1c-f6ba-47b2-9425-0080e6f376d9", "comment": "Malware payload (Amadey)", "value": "a818fc79cdbc7fd42751f56c48f1863349511f118b3862d732d8431102ef68e1", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754219, "uuid": "bdbfbe22-9bc4-4bcc-9104-089f9727ce57", "value": "T1899533C6E2238B39DC78937B2923C2450F2FB20212F656AB7C66A0D9D41F3D57D627", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754219, "uuid": "8d79e61e-3187-47cf-9567-40d06fc42a9a", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754219, "uuid": "fac95bbe-0e09-4351-8402-2fdd3b1735ed", "value": "49152:QRdtyZ1bEYjbYeFd9J2d6SOOuJ3WSPCkOQv5:gE1bEYfYe8fOOcGAOQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727754219, "uuid": "720ea734-c9cf-490e-912f-e14efa862c7b", "value": 1926656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754219, "uuid": "a9ba68c1-ff66-49c2-b11f-0e1b33e370de", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1e40e8f-7fa7-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727754342, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754342, "uuid": "6ad6a7bc-2338-49ea-b1c6-953795dc2214", "comment": "Malware payload", "value": "cf92ce167b229d89d9dd400b949f7671", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754342, "uuid": "2edf6207-eb17-4207-9b72-b60775e6ffbe", "comment": "Malware payload", "value": "a981867c0e03bc94595a67d4494b9564f113867895deba166b4c75b17c82a6dd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754342, "uuid": "2faab444-26dd-4406-9f7a-1c950495ad72", "value": "T1F3035CBDD20F3CC5D1C8F279AD854FA2602BB4F486B8C6726E02435CC5999DADBD4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754342, "uuid": "2a184f12-5a0a-4f5d-a80d-d7fff5a7af75", "value": "384:n+PmXfXqrofw9CZBOZdBsswWr0tBWNA/nH1kCThvYud9EOFObAifnA3D0/PTC67G:sHSQscPTwWrgH7gusOAA93g3eO0FtD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727754342, "uuid": "15503790-7c24-43a1-bb08-2602e409f492", "value": 37968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754342, "uuid": "2c799660-0ee9-47bc-86a5-aee86ec822f3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c69b146a-7fa7-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727754404, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754404, "uuid": "a0e0bf21-b1c7-42d8-8bee-2de9217df1cc", "comment": "Malware payload", "value": "b82ef22c42b9ef1883f67afd49f445e6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754404, "uuid": "2145f5a8-a40c-4eca-85c0-c34b591b3c6f", "comment": "Malware payload", "value": "8825a541f02ae883c9e059d2568f918bb7d5d0b66328360ebd727ca6a0a83856", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754404, "uuid": "4c014afd-49b8-4be3-91f4-31af73de373f", "value": "T1C5834B53D48299FCD85AC1746D9FA17BD922B8B4023A355E1BCCFF23399E9209E1D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754404, "uuid": "0eef6a98-bd44-45e9-8327-f469668baa90", "value": "1536:thwDUb+fAIsD7Bw4htJE4s5DGjxQMQZKszhQRg5QP49nIiicJJdu4S2JA2qIKBDS:tEUbaAIsD7Hb3cDGjeLos1QRg5n9nIzG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727754404, "uuid": "fe4719e1-3eed-49c4-a174-c0c9f7d04764", "value": 82688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754404, "uuid": "80df8664-1783-4c3f-bd01-a26b0dbb4eb1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b6583a4-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727754761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754761, "uuid": "fd16b4f5-9c73-4748-81bb-90ff3bd1bcb7", "comment": "Malware payload", "value": "97f1d5ab0a8a788fe91da749066986d5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754761, "uuid": "2bec3b22-18c3-450f-96cd-a4ec80dad3ae", "comment": "Malware payload", "value": "e6cafff6d2584c114836f0594c4d7373f6f48236177235c179c9d75394ee73e3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754761, "uuid": "2e96cf22-3264-4444-b3b3-2343b416bc2e", "value": "T1E1D31B056BA40FB7DC97CE3B01FA1B51158CD81B27562B363938EF687A0728B99D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754761, "uuid": "f33bcdf5-56d9-47e9-9a24-5554caa9bb6f", "value": "1536:8kK2Pf3laRiw44jynCddRf5X+KoEwFqmrdq2vclNuwdtUH:8EfsRA8QCZ5uKAdq2vaDd+H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727754761, "uuid": "c4bfcc7b-9801-4c31-8d26-20ad7d626bff", "value": 142539, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754761, "uuid": "5adb6899-ea32-4297-80ac-8021483e5207", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "179f4a9e-7fa9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727754969, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754969, "uuid": "866a231e-30df-4368-a587-6b7498e88ae5", "comment": "Malware payload", "value": "1e9af96fec8a0f6be18c5fff760fdf7f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754969, "uuid": "6ec231b3-2bbe-4ee0-b448-2c1d371021a2", "comment": "Malware payload", "value": "d71d0a7942fd04ee4139f1eeda6ec72a169abe55f1df5c02afa174b4965b98f1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754969, "uuid": "7812a93d-ee2d-4416-9e68-6a92931a2114", "value": "T1389118DD3F517F324CA1DF14F2628AA169A2D8C504934F1974EDB0BEB8BED44B2119", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754969, "uuid": "c1d371c7-dd14-4b8e-bed9-5eeb9e77734c", "value": "96:Hz6zTz7Lzpz3czPzIlbAlxLee5fGfLf7zf5f3gf/fII9C7aI332IfYSmCoueF/lN:qPK5OTDzxIXgfXqfrJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727754969, "uuid": "479be2a2-fe31-4127-b939-5d1e343e1edc", "value": 4611, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754969, "uuid": "487d6ca2-8569-439a-87d2-88121618989e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce5d16af-7fa9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727755276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727755276, "uuid": "c8c955c8-d258-477c-bc57-f02c4761fc20", "comment": "Malware payload", "value": "f9f90e70e9092b970d874b727eb7fe5a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727755276, "uuid": "33210790-d541-4d50-b327-f7e6f82a80e8", "comment": "Malware payload", "value": "7bf14e90060b08f61b50f2721cb281b3cce7335b13e4c89b89d8bf132e798981", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727755276, "uuid": "2743d263-95c6-4d46-90bc-c0f8846ed590", "value": "T1D9D3D62B2A218F6DF759C23587F78E714A5836D61BA3C184E27CDB011E1138E692FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727755276, "uuid": "52ce7bbe-b727-4a8e-a0c6-ad464600b123", "value": "1536:MUaxIaDKFTFkyP6LGQ8lA1/S1n7d1nZCoeOVqUHaOhoGL523L488kRshZBDvu1ij:M1xIzFZu4HaOhR52VIhWB+H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727755276, "uuid": "10a25433-f977-4b07-95c9-4b8e635577af", "value": 139317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727755276, "uuid": "4580fb82-af33-4eb0-a02b-753cdb545db0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2d4ae84-7fa9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727755283, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727755283, "uuid": "b2acef22-e0f0-4cec-b306-2b32269910e1", "comment": "Malware payload", "value": "9124cba6558cb01afce358171255fa59", "object_relation": "md5", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727755283, "uuid": "f2d9eeec-98bd-4ac6-8e62-dc7154f7cf78", "comment": "Malware payload", "value": "850c85d2c0766eddef1e2ff6c2554c32627bca6516a209438fcc131d6a913efc", "object_relation": "sha256", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727755283, "uuid": "3c3cefd3-d880-4a20-9dcd-508e96a3ea64", "value": "T186D3126F29807218C20FD3FAD8194F687569A7E37903664BED33195DEC5A0C759973", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727755283, "uuid": "6f2c9ff9-d995-444d-b290-2f261e51e833", "value": "3072:04NRhmgMo1HX1KjED/2zAKFPV9fCB6/zS64hSzqsSRL1:nNGo1HX1K4mASvfCNMqVf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727755283, "uuid": "d8c902e9-4a62-4eff-a618-d053e3bb1c3e", "value": 141723, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727755283, "uuid": "cd2fef9e-7381-44e4-ad4a-7e14477fa1d0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b655ea98-7fab-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727756094, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756094, "uuid": "257d72aa-13de-45dc-9747-a90ee0648ec2", "comment": "Malware payload", "value": "01c227c31afb774df17ea789878018a4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756094, "uuid": "281782ff-d537-41bf-ba9f-3229eec0751f", "comment": "Malware payload", "value": "ef8f1aec6f7dccd1d1a39f575a341e4b12981337ea3ac39c8cb00c22acfdc0a5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756094, "uuid": "85594d5e-345c-4482-b688-dc6ca3278fca", "value": "T1F8159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756094, "uuid": "a95dddfa-f0bb-4b89-a003-677d655c8f47", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756094, "uuid": "007849bc-d37f-44cd-905f-336d21706b80", "value": "12288:FqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgagTs:FqDEvCTbMWu7rQYlBQcBiT6rprG8a4s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727756094, "uuid": "81d3501d-96d6-435e-9dd4-7c5e23dbcbe3", "value": 917504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756094, "uuid": "a5b6d28d-057b-413d-96f9-a725cf0b7b11", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eef56af4-7fab-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1727756189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756189, "uuid": "685eff45-0e2e-421b-b769-49a7e0501fac", "comment": "Malware payload (Amadey)", "value": "c79b77fa96a330c1b0776fa1c9b93019", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756189, "uuid": "d5041624-5e0a-4ef5-9588-6379153098fd", "comment": "Malware payload (Amadey)", "value": "cbca556709055c388321fde2c5f93cf18727193ac5bf05c8e8dfcdeaad05c2a7", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756189, "uuid": "5d13042c-c5e2-44fe-a777-1cc2dd7b77c8", "value": "T13A95336A3B555001CED7BCB2577609B66B7B74801A72EF3E02DAD2178A3BCCC48A74", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756189, "uuid": "63fdafd6-f333-4c4c-bee0-53f56ad789c3", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756189, "uuid": "73665f35-317d-4113-8d98-e8d57ce2ba69", "value": "49152:fC62QGsF9jZOnwFc1SK28kpt1olNj+2ddh9:fCMGojs1kwct1olNCUL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727756189, "uuid": "582402a5-c488-4742-8d7c-b64eed2e7346", "value": 1942528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756189, "uuid": "9ff57745-2ed1-47a9-b5cb-65b67a657065", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7ba6e9a-7fac-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727756526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756526, "uuid": "b6c5252a-fc7f-4b6d-8fb9-586d03a374ee", "comment": "Malware payload", "value": "2f25adb409c9d48cc714c5de64b84919", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756526, "uuid": "1815869d-aa9d-41d5-8d81-76cfbeb93b51", "comment": "Malware payload", "value": "cac8e74208cafdfad4a8e593c3b19663fcce0caea706549c53bae1cebc89c0c0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756526, "uuid": "a2fc76bb-4bb2-4bfa-a5bf-50a39837ebce", "value": "T138733A31BA361E27C4D0A47921F74B15B2B197DE26A8C61A7D720E9EFF206503943E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756526, "uuid": "19460369-45b6-45b9-a508-f745f70dfcee", "value": "1536:95NM1U1sLOxJpXo3V2n26kDfzN/KSDc5Gtcd15jktJor:7CChYDf8GCdnjkor", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727756526, "uuid": "5a151e73-be5c-4703-9cce-d41fa1ce9f61", "value": 76296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756526, "uuid": "e5254130-eb62-43ed-ad77-c4709c0180b8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd72ba4b-7fac-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727756562, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756562, "uuid": "bab00813-fae5-452d-91fc-c0ccbe1b536e", "comment": "Malware payload", "value": "8b8f38fa07773982b92e1f505d06bee2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756562, "uuid": "8b32da78-8973-428a-9a4a-047a8403a251", "comment": "Malware payload", "value": "9f6aaebd5d32edd9d81f3662a69fc85b52cc853a51f7b7e205a1e6bb06fcc543", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756562, "uuid": "c7384741-fb06-40e9-aeea-f54dc0e2a859", "value": "T13B92C006AB091C3AC6E1A87EFCA9C20A6B074EBC91F7337A9665057C6D9106617F83", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756562, "uuid": "924b3f50-c226-4bf5-bd5f-889eb97bce1d", "value": "384:qm7vZJpB5OA7pPf7p6JdT2Y4D9SEcFxMuU2c2hkTyX7KYChymdGUop5hMp:N7jpB5OA7p7p6jT7KSEcTMv2cjTc7KYY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727756562, "uuid": "b583e217-4198-44b3-bfee-be411116aaf9", "value": 19872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756562, "uuid": "98d4382b-3114-4a9c-acb0-0883724d9eb8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "074b3b34-7fad-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727756660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756660, "uuid": "1de44eb8-58a3-4fad-87f1-9ed4a3651661", "comment": "Malware payload", "value": "1e134d5daa4044475dd8570d5366e097", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756660, "uuid": "f87b9820-3aae-4f97-bfc7-21f5ae7eeafe", "comment": "Malware payload", "value": "06010b95035e6080cdf42c7139c96976d2ed65b252c674d5264b0fa74a5ae155", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756660, "uuid": "82103cc8-3123-4151-9007-8af5960d3875", "value": "T168E32946BA418A47C4D11776BE9F42463323EF64D3E73306CA1C5FB43F867AA0D26A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756660, "uuid": "a3ef5773-eb30-413b-a89e-846a3ad515a7", "value": "1536:QqnEdwmhhn8QR7w2uYTMdCj/tw1YFvh+3MClhSiswBXt7sNGBrit1u2ViGO+Fofc:0h8GI9Cj1w1YFvhslBXpsNGB+nxVFQDo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727756660, "uuid": "bcec7446-0444-4321-ac50-873acf046a49", "value": 151025, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756660, "uuid": "66192e2f-2f30-40a6-92e2-7e60fdaa1c67", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e47f2f6a-7fae-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727757460, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757460, "uuid": "072b74f7-8987-4b31-b39a-5c3000be4577", "comment": "Malware payload", "value": "7104571a06618891b3eb3d4e08b8879c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757460, "uuid": "9830c2fb-d1ef-4858-b63b-e0ca3a585a20", "comment": "Malware payload", "value": "24120db747c549e6352a9a7e44be4eca92005dfcf3f12bb1cd3c42708813ab4d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727757460, "uuid": "aa089430-1b84-4c9c-b4c1-62d35a743f17", "value": "T19BE2F100666A650CC8D1D939F2FB29FB2C6110C4FF7FB043BB598EA7967B89045769", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727757460, "uuid": "f7e9e957-3e32-4e88-88ac-536e67c9a6c0", "value": "384:Mgto3w0RWq7+HEDlIEgRXag2t9OprZeRVBPH7nBPuD15ztwM0gnMHO/mfsNv1Ro:j+3wOnvgP2jOpw3Vup5zeMDnsO/mfKo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727757460, "uuid": "ce0df801-4433-4ece-8abb-242270d4c454", "value": 32212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727757460, "uuid": "55c61c49-6fcc-4691-879b-e733fb29e683", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62455169-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758101, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758101, "uuid": "1eb3c9ff-4b24-4a08-9410-fffb5b019809", "comment": "Malware payload", "value": "898829db95bf4612024c01b0d13bbfbe", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758101, "uuid": "cdec3a78-d3d6-4df6-81c2-ccaf41bfc3a4", "comment": "Malware payload", "value": "3cbad3421c00442c02381be92f311b315580f7ef1261fd8ae8305b7d64d5dc6b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758101, "uuid": "a29bf414-1973-4d02-bfe9-59c04fef83a1", "value": "T17F639E3EE01A5F84C5864434B5688E351F13F1C983471EBB29E6C2B6A497EB8F905F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758101, "uuid": "fdad2a34-f868-406c-9c31-defbf0db98b3", "value": "1536:M9q9FZl2Hf8veGlZTjvKd0TF7v6dxQMHCDe00q:M9qXZ68vemjydyqxQMHk0q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758101, "uuid": "81f3b3a1-136e-41f2-b837-4697e6993b84", "value": 66868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758101, "uuid": "cd8bd682-3d21-4091-bd7c-18ed37655279", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "765e7c36-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758134, "uuid": "42b25396-2a1c-4ac1-a0ab-7aa4726e5588", "comment": "Malware payload", "value": "9c59ac72ec29c6dea9bb767c00cb1725", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758134, "uuid": "f7e1ff43-2ea6-4c0d-a98e-c9d16b2e3452", "comment": "Malware payload", "value": "2a957027116a54b17833846fe1af8b4213f708c678dc778cfb6e56da585a840d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758134, "uuid": "2f840bfe-35c1-40f1-a9d9-cd287483c612", "value": "T173E2E0A380A1D578E3304CF5EAED1C929366D73ED2DF37B115F021A591E496931F4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758134, "uuid": "3ec83ef9-6d97-4361-b2d1-63ad9e25d28b", "value": "768:E0DnnpHX5IzB9FVmHabPb2sFYAXwYXZgidIazP42tUs3UozMD:LsPWHQPbHYAtqiTzAMxzMD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758134, "uuid": "b662a56e-a048-4b98-8e6c-8ab6d89d857f", "value": 32908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758134, "uuid": "6492b826-8fe9-49ab-ae15-befbb88a4267", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bf7dd5b-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758144, "uuid": "523d78bc-962b-403f-ae87-daa838a072dd", "comment": "Malware payload", "value": "8c4d2482c9b62e0d33d6ee9b1e0dc895", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758144, "uuid": "cea3dbd3-e48a-4af6-a93c-d65a1c230b5e", "comment": "Malware payload", "value": "aeb63335cbc39afa0824216c333ff82457b0304d7106b1ee1d47c12020f6b010", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758144, "uuid": "43938eda-5935-46c9-b751-ee74f4d26523", "value": "T10AA31B0AB9919F01D4D631FAFA9F415933136BB8D3FA7102DD20AFA423869DB0E775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758144, "uuid": "39d1a7a4-2ff8-46b2-b405-602aa796e27a", "value": "3072:9ek/9ayEHIsJgapFQuccoMFa8V6zDogTIWYKbh:9ek/0ySgapFQuccBF763ogCKbh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758144, "uuid": "c68c0f24-c7d6-4b45-85e1-61ed65b0ec86", "value": 106136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758144, "uuid": "7915e5f4-ecdd-45ed-b119-9d46b799df92", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a67bb596-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758215, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "53913919-1c4d-41f5-b24a-302861187607", "comment": "Malware payload", "value": "3c29f9e4cfd902b6f8e1ad24d8f227d8", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "3bf2d572-1f5b-4422-b89b-8103d955781c", "comment": "Malware payload", "value": "ef0d7f5d0432120a7f08563c8249031f2dba819199941784d7940819ddf383a5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "c46b6d27-9973-4ce0-b3e6-e04b90e09868", "value": "T145B2D0CC61843084C98D7C7C178D4AA65F6CA190BAED9B25E350CE98B7BAA4F385D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "1489fa9f-bb5b-4871-94ab-ecc438af5366", "value": "768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpmZqEWvR:/QlS07FUXqIYSXQKquqq/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758215, "uuid": "76ab78b7-a380-4d63-b3d6-0e7fde1cad13", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "eed536c7-164f-4b33-b83c-5351759f6147", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a67e4c08-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758215, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "b0c683ec-5ac8-40c9-bdcd-a47f2b981064", "comment": "Malware payload", "value": "122a6d319200c801acfea520dd55acad", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "d5c20b28-d657-453c-9d13-45fbd6937233", "comment": "Malware payload", "value": "fb7c8c4295ae9cc5558de5acdd6ad4a6e86107752dc3d988811f1b7b73f2a5b6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "cb799b29-aaf6-466d-bc2a-d053c82637e6", "value": "T1D8B2D03C2B151B99DE1EC0BE839C1B603CB82B2591829D4B6307EDD79F964747463A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "30b6b7ba-f007-4bce-ad2c-ab84e8b21761", "value": "384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiNOmdzJgGlzDpH7uNj1JAd:neD8ZSWvZHZbs1row697qohQvg9NOiz5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758215, "uuid": "fc017a29-f05d-4d4f-87cb-6c7c2bedbf5e", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "d9b77108-da2b-4ecc-87c8-e81dd41622f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a681dd04-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758215, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "59c82fde-a08d-4d5f-9b0e-942d1a685606", "comment": "Malware payload", "value": "00215e455da224265ac766d93ec78199", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "5a345b40-c13c-416b-a6e8-e51c9046542d", "comment": "Malware payload", "value": "0ae568c882f01d693c47fb27076c59cd7446f12048dde461b4504d759893d976", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "8d00c1db-2041-4223-9f8a-c465165c6324", "value": "T1FDF0267221504623C2F115BC9F424ADC12B5C31F50238604458DE9CEF437B68573B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "6752f091-6f11-4e49-9273-5971731b2460", "value": "12:QmoWosMWrWdAb5DAC6MMmyXfrpz8LBtP6xh/Rgq+VjMx:QmiBAmWwDpmnP67ZAVQx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758215, "uuid": "8d3e9a19-41c6-4ff0-91e8-32c76e15dbd5", "value": 560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "1303c7c4-a08a-465a-b705-d8d926d41448", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a683341b-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758215, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "631fdd24-e082-41cf-bba8-7d8757c1d0ba", "comment": "Malware payload", "value": "dd965dd5367ce5472ec265f828a6821e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "25dd6919-bced-41f6-805f-6e8db47e0a1a", "comment": "Malware payload", "value": "4192ac3629bce886b39053f2c79d28d86b0ccbb6d8574be57722e7146ee66420", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "007d12ab-c10b-419b-8aeb-9bc6ebc82ead", "value": "T1E2336C36E029DED0C6960134A4E88F751F03F1C883536EBB2AE546B2645396CFA19F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "eaa33479-0497-49ac-bae7-e852bd6e65e4", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+m3CZQoV/bnmCozw:Oa4U7G7SvT6ftBTm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758215, "uuid": "1dc77d5d-7785-4809-b0f0-4fb8b1a392bf", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "dd23caa0-2dc7-43d0-b813-a75a8627dd00", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a69f0cdb-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758215, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "694e3a0e-2400-44e5-914f-17c4063d2930", "comment": "Malware payload", "value": "925f56faca987c00ac8b4945d7441043", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "e5052e1d-8c20-49fe-998c-072798d395de", "comment": "Malware payload", "value": "d1cb2c4d24c700ac01fd3c9f339e6fe9214c0b261386ecb172abdacf25d1c3d6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "46c059d7-4d42-438c-ad43-5cb12dd249ab", "value": "T12AA2D025E346AEF4DFAF9D9053C1C2C277E547C62787C8E240FEAF016516052BB88D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "991e6c03-8bfc-46f7-8f75-3a7b0c1dea70", "value": "384:9/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C5czM4uVcqgw05VxJg:9RxsSVsMD6xiJJE5zRWNl4uVcqgw09e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758215, "uuid": "07047bc9-5636-4593-a59d-f15e7e5f159d", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "4d77f56f-c741-40ab-975d-d336b29743c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6a01449-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758215, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "e88ec180-07c1-4214-b25a-27be1aa46665", "comment": "Malware payload", "value": "34ab52a236df958808e03df72e2d187a", "object_relation": "md5", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "0512f7fa-1a57-4268-a9bd-0a7cfd98a7eb", "comment": "Malware payload", "value": "236cd1ca6ef829a7314ab5cb95faa81ab12e52f404b514ff14429a0e607500c6", "object_relation": "sha256", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "76a7ce84-187f-4315-874c-3a823e170dbb", "value": "T1EBF0EBD263603020E3ED30ADDB1ADB889335A30F6B5182649BA980C0523A5385F4A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "5e84b890-c012-41e8-85c5-f3393eee6a69", "value": "12:LNrmoi4PtL0SZzujpPncUV1dXnNQR5fj3Q/UVzndfDtuq+VjMEMwmXc:prmkL1VKcq1dCXfj3Q/qzd4VQECc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758215, "uuid": "79c7df75-21ae-4df4-839d-ce6aab6e7788", "value": 562, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "5befa2df-7c37-4345-a51e-fcd5f5ced2ca", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6afb1cf-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758215, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "ec4d209d-2b0a-40b6-834a-af37334cc762", "comment": "Malware payload", "value": "fd3b43e82e662fe224634f7146c70a79", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "ffc52652-ae68-4f47-93e6-8e0b5bc8705b", "comment": "Malware payload", "value": "54fa8f02a0541303e64e4b738fcb7c79f6330c97a349b554826fbaa87c254a4d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "6862cd74-22b2-4017-9354-994df6611bb1", "value": "T113B39CDBF24701A0C8624AF007CB4BED3E2723815F27C5E72C6A657969791CF8906F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "3d1238fc-b58f-46c3-8402-33c57e2b8d54", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg1x/LWy:c9sSyzz36YaWWgg1xq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758215, "uuid": "e3f11bd7-4fce-4df7-a84b-b6941d25ccd5", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758215, "uuid": "1826a2fb-9b2d-4337-a4a6-9682bbe82bfe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6e8356a-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758216, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758216, "uuid": "bbed79de-de62-4a75-a53a-271d4f1c54ec", "comment": "Malware payload", "value": "e043677095c5ff013c3cfb0630ad8ee9", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758216, "uuid": "0ab5eff5-8db3-4cb1-b863-5827e11ab2c8", "comment": "Malware payload", "value": "845e67d80c55a033fa1166553bd32e73b47fa312167c2c64f6123b867798a847", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758216, "uuid": "993cfa63-897b-41fb-816d-8931038cf941", "value": "T1D0432921B63A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758216, "uuid": "a10d1f41-4277-400a-aee3-fe207310d390", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKqgESnmC/xO+KpAwu:RqtmZPuutfbltZFBSJsBcfDSTFI+BEu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758216, "uuid": "8a53fba3-b534-446c-8023-c2450fa3c188", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758216, "uuid": "2f567399-d345-4457-a86c-04f7650635af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a779738b-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1727758217, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758217, "uuid": "71c4aaf5-820b-4dc5-bab0-2338eac70bec", "comment": "Malware payload (Stealc)", "value": "4c469e2cf403fea6249e835ddce23de2", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758217, "uuid": "40ecea92-d60e-4076-b517-2caefc957991", "comment": "Malware payload (Stealc)", "value": "7c3a65c140942c5ad29eb1d741cd079157a98c294a3b2d119b4b14d62d198f6a", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758217, "uuid": "a5fce78a-5006-4902-af79-0af79be3b53b", "value": "T105D53338A7E9CBCDFA8E4DB8C7514D41D7761A42A0080692AC0AAE1758536FF0B7CD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758217, "uuid": "65c75eeb-0d0e-4b4b-8f26-6f0d5f88c267", "value": "49152:Y1ccFi4ANSG2FimdgnCkrp/8C7giqTxQV/lnlxCHttYx1KSRkQ3TmySrlw:N7NSLizCkdB4mVdnl8HtKBjIw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758217, "uuid": "f1ea7f8c-2721-4e8c-96cf-1b4107c0c3c2", "value": 2795486, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758217, "uuid": "febf2594-825f-4e2b-828d-a4f425a2346d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a77bc9c1-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1727758217, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758217, "uuid": "60211fe1-0b2c-42dd-bd06-5b0b35fae40f", "comment": "Malware payload (AsyncRAT)", "value": "b2635939c03c4b874fe8fbe2623b614b", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758217, "uuid": "da5da435-cf61-4231-a8a0-7744c02d1347", "comment": "Malware payload (AsyncRAT)", "value": "71b24988baca1ab4ff4263bd3f48d7a7e91ffca9bdd85227e353211f999da4c9", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758217, "uuid": "b596c685-0770-424f-84e5-1a38ba5d5121", "value": "T10332F8369A63FCC037BE3AD0D9442E911C947D138BB5676CFBC4086A1D9A501DF2E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758217, "uuid": "a1c40657-2c23-4e62-abe0-3f238cf5c367", "value": "192:IYdLNb7MuGywIKoUoJ31MQmtKoyAHAGnGlOnXBAhqrJ1zKLIpKEWt:RMujQosJHAGnGUnXBAhqrJV0IpRWt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758217, "uuid": "d7f432b1-2941-4b4e-aa00-4a52b4cfafde", "value": 11608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758217, "uuid": "ff9a3ac4-2578-46d4-8850-32813b93183c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7c2c248-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758217, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758217, "uuid": "d1eba93d-7d00-4445-8c33-ae9db3df4b42", "comment": "Malware payload", "value": "7fde2cce6a9246ac94047c2a20f9833e", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758217, "uuid": "cc3810df-57f7-48a5-8b8c-ad0498e2c6f6", "comment": "Malware payload", "value": "4e6c3a1e17fb46c61147f939d8e5d41ce5f3212a2f533178a2c6c38ed799a0e7", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758217, "uuid": "700fbddf-233f-4e26-b12b-42d7039b22e3", "value": "T1EFF081B29E567611C6F825A64B4731D47E1FAF6E027A766746CC82C848307387E811", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758217, "uuid": "95dabe45-ee66-4be6-af5b-effd59319555", "value": "12:DVJmoJUYWHJs9WUTJuASV10XL9qDXGEULBNFrRX7tne98I+q+VjMrIxVZ:Hm+UpVaJp+CZsnULHnXa8I+VQriVZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758217, "uuid": "c528827d-1d1b-4828-b725-3d6b0112e8bd", "value": 567, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758217, "uuid": "3bbaa77f-c534-489d-81d0-c859d56b2841", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a91eb6f2-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1727758220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758220, "uuid": "64c1b5fc-28d1-42e5-a3d7-e7c77d678f80", "comment": "Malware payload (Stealc)", "value": "d56300bfa907be16e5246c3012e4a301", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758220, "uuid": "0e927e59-9a62-405e-833e-1a227f8b3ec6", "comment": "Malware payload (Stealc)", "value": "10aa4679e264374df505a4eb103b09ca5371b250f514b292be43caead10de27f", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758220, "uuid": "cef9c912-cee8-4da1-850e-53ab36ac7a55", "value": "T1A1D533E13D09030FFA2700FAE3955E63CEC7021ECE16A9E012564799975FBA2C2DD9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758220, "uuid": "10738778-6bb2-40f6-b67a-3b527bb43706", "value": "49152:9TkgpfjxKpAFXpLyHtKld0S/rIjAyZE7mhSu15UwUfZ9dj+coB/PhB/oPxJpINJB:zp7xKpAF5GHCd5IjZE7eSu15/UfZ9031", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758220, "uuid": "4cef632a-d5d4-4c39-a967-f9e60bbfcb03", "value": 2830905, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758220, "uuid": "4860dbee-5d14-405e-8b0c-5292f3b2b435", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a97d6a25-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758220, "uuid": "e3a8045a-e784-41f4-b489-f1c2645fac64", "comment": "Malware payload", "value": "6034888eb4c01a5e0859b2ed16bd1d45", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758220, "uuid": "747d4c4d-8657-4c4d-ab9e-ae7d3fdb7804", "comment": "Malware payload", "value": "bc58a6105f2296c2ddc58bc4ffc1c7eca4293ef4e70fe9400303737438f50220", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758220, "uuid": "8fbf466e-cf67-4c84-8a41-53a98265daf6", "value": "T1A0E533E3227146EC704ED36EC0BB086F998E05EB9F06D1BCEF2C45536CB19A4A795C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758220, "uuid": "b6445ca4-3010-41a0-98c4-84184218fefa", "value": "49152:tOH2D64RHwigx2IyAiCE5JxK9IF0tUSUHqTSj+mauhqXcBXyB1oTSbnbLWn:CkN5wL0CE5JxK9I2CSUXnqXcgYS74", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758220, "uuid": "0ac22fc9-8352-4e0c-ba74-d71dd77a19bf", "value": 3075301, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758220, "uuid": "62cfa5e3-6cee-4caa-9876-ca5a8e6388bc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af566b0a-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758230, "uuid": "463fca48-fd4c-45e3-ac16-48972b9af6b4", "comment": "Malware payload", "value": "d9b5c39848c0c6dd7666122f4a3d5286", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758230, "uuid": "2018b540-f449-43c9-8d14-58331720229d", "comment": "Malware payload", "value": "b7da5cb309fcd732dd5071251c164edce10927313a3cc163c2690c5368c128da", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758230, "uuid": "d0f2f704-eb9d-4bdd-8ea5-b2c6f554fac8", "value": "T15C9699E0DCC13A1ECC7955729AA22EF0C796D674E3218D770FA4264C89DF35EE16B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758230, "uuid": "636e5747-154c-437a-9459-c6208104c227", "value": "196608:OXf+qkeaBl+9ST0F3EXRFKe29nBbxwbfS3zEKgPggHrXIXmnthnCEUsDj3A:6f+q7aj+8T0xYRFKe2zxsSLNU7MKh6s4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758230, "uuid": "557b2462-67b2-4a64-aa77-d07c4fe20b92", "value": 9170662, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758230, "uuid": "00827175-9983-4623-8180-58e14226c4a6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b16ae724-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758233, "uuid": "17e18b9e-bec1-47d4-a68c-3403d4cd212a", "comment": "Malware payload", "value": "db17b6420bd0194b2053d6f1cec69cc8", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758233, "uuid": "11da18ca-10f0-46e0-93ad-f592ad2d51ee", "comment": "Malware payload", "value": "6c88649830495d542a0f58cdeca983c15de71358d8bab0a7ecb3bf6c0e01d5f7", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758233, "uuid": "b3292c8f-97ab-40c1-a287-9f69ea2f0add", "value": "T125C633EFF49491C964638DF293A478A7FFC71C2E46D3061E982504E7ACDA7A49B306", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758233, "uuid": "c96e5874-8b09-4832-80f7-be41358d05a6", "value": "196608:X5s7VGxnp22Hlu7jPVO+rnCkY+mxy8Z2DyewgxzmgVZfmM+tHjXsqoQM:pQGV3lu7DVONHbxy8Z22ew8BVZfMX8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758233, "uuid": "d2bdbfb1-1060-4ff1-8c15-6554a4fdf3bf", "value": 12573945, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758233, "uuid": "2afd541b-186a-438c-ac3d-bf4e248eafd7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b22eb9c-7b41-11ef-afe5-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1727758235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758235, "uuid": "8d554122-6b32-43ad-a87d-fd1124249a67", "comment": "Malware payload (LummaStealer)", "value": "c234ae17876a05f66d44b38451c90332", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Lumma", "colour": "#4dc764", "exportable": true, "hide_tag": false }, { "name": "lummac2", "colour": "#2aaf0d", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758235, "uuid": "f8b0821c-6864-4139-a289-87e555b81e5e", "comment": "Malware payload (LummaStealer)", "value": "8a1d9383c7b577d320bf352ff6424e571d2687d150619f5a506741d6da29317a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Lumma", "colour": "#4dc764", "exportable": true, "hide_tag": false }, { "name": "lummac2", "colour": "#2aaf0d", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758235, "uuid": "babdf1bd-370b-4c65-81d2-671e4809f199", "value": "T1CDF633F6FD14AECBFE7364994A149547A6F604E63030ACA180A1DAE1F6DF7904CC85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758235, "uuid": "21acbf9c-3647-4b75-b63d-4f7e1aed914a", "value": "393216:0OwdaAZ4LDyTSla8E8GBLzhsWL/4Z7yFg1E5h1Z88kI:KVZwDX0VmWL/4HU8TI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758235, "uuid": "cfa6b71b-dfc5-4e4c-9825-1ffcf6f63c7b", "value": 15880804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758235, "uuid": "dbb9feea-c27d-4993-bee6-844ec12936ea", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4895b21-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1727758239, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758239, "uuid": "75d74c10-3f68-48d4-b21c-dd328567716a", "comment": "Malware payload (LummaStealer)", "value": "a1b6bd75d211056f005183773974806e", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758239, "uuid": "2ffb75f1-e691-4729-9155-a5d225a00962", "comment": "Malware payload (LummaStealer)", "value": "31a044f747c875c0350043f1429d06480d2242e3e4c49f0d56c08ff7d5eb559d", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758239, "uuid": "d3bcbc75-b2f6-46e5-9fd7-cbdc48d2e058", "value": "T1EBC633C749EA01DA1193B347DE0C478D2A0E0D19CB8AE836DDEF164A2EDD1EE43559", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758239, "uuid": "46376646-5048-4def-bddb-86ff29a20dfa", "value": "196608:Bg7rsEQFXwEXY9i6BfsyVBjsFX4QtPPQOA043a2Ru/rax8gcqtre5TjQ6nE5qptp:y7QHGDk6fjb3aAKrasure5T5uqX1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758239, "uuid": "e3179b21-691b-4b47-affa-f950baaf1743", "value": 12125652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758239, "uuid": "a7ed712f-89ab-43ad-9a06-ee3f640f3338", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b49ee94b-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload (Sliver)", "timestamp": 1727758239, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758239, "uuid": "b73e1784-0b44-421f-a1d1-cf55bd572b38", "comment": "Malware payload (Sliver)", "value": "2746a7120bce30e9230a2e71a9ad909f", "object_relation": "md5", "Tag": [ { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758239, "uuid": "87608d99-39c7-48ad-a3e2-282ef5490ff9", "comment": "Malware payload (Sliver)", "value": "4480d314657f84b2f829fb85fe6603c288bd9262e00e752e475c2a315dd2013f", "object_relation": "sha256", "Tag": [ { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758239, "uuid": "cdcfa1fa-9dc6-4f2c-8c0e-ce72d50578b0", "value": "T1DFF62C03E89611D5C4E9D1B089258272B970386C1B7933DB3BA5F7B42B327E05FBA7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758239, "uuid": "82e578fc-e477-4cb0-b7aa-21f32816c3af", "value": "f0ea7b7844bbc5bfa9bb32efdcea957c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758239, "uuid": "28693425-bb6f-42ab-b32c-8b7f323c4a8a", "value": "98304:43pEB59UU/DVSk8V57vYJDysmvezaIaFiP5wvEx5S/8/yKTqEc:gpEBIIV2YJOsmvaaIaFU5wsxgU/yH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758239, "uuid": "79e3af3f-6d04-439b-91bd-4ffd453b16a8", "value": 15875584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758239, "uuid": "67aa1b99-de36-49fa-b333-d96fdb04019b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24a6e0b3-7bff-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758250, "uuid": "a404db79-a260-4664-990e-ad00ce1cd603", "comment": "Malware payload", "value": "3c7eb79a20149b37019ece0f6ee13405", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Lumma", "colour": "#4dc764", "exportable": true, "hide_tag": false }, { "name": "lummac2", "colour": "#2aaf0d", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758250, "uuid": "4bbb3afd-454e-45a2-8f1b-4b5eecca62f3", "comment": "Malware payload", "value": "3f211a46915fd395e75765c53085ce3099109f385d026550067fe130f07da183", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Lumma", "colour": "#4dc764", "exportable": true, "hide_tag": false }, { "name": "lummac2", "colour": "#2aaf0d", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758250, "uuid": "af6edb75-a339-4361-86a0-ae59c0790c84", "value": "T179D6CDD4C8E1BD99D87A08B68F862EA0DA418175F368DD735EEA614C08CF75F8A377", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758250, "uuid": "c26eddfd-25eb-45a4-98d6-3ad9c0c09aef", "value": "393216:mdV94mblZVv2d03NjEGBRc2vyRNdQX0IYuP1gip7:QV9nbvVu81EURc2vEMX0wN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758250, "uuid": "2e27b793-6661-45ef-817b-a1ae235d6685", "value": 13694080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758250, "uuid": "34b3381d-d7d6-488c-9e8b-02cd55d0e4b1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2f83238-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758263, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758263, "uuid": "b00de60b-0000-41bf-aaf5-3b00a1864416", "comment": "Malware payload", "value": "ce2e6351b6c34708c3938b91fdfb5471", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758263, "uuid": "f7dfda30-f243-46ca-b282-772f22ff4148", "comment": "Malware payload", "value": "4cf1f6c3a38f69f0b9fa053cec609d625a27f6d9741d48cca17ba06b51ff29ec", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758263, "uuid": "c7847afa-f31e-409d-b63e-72da7b38fcba", "value": "T117E2D030F8616B46DFFFB1641E4196A53FE90E69673646D1239ACF4180C743E606AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758263, "uuid": "a26a7dce-c89d-4f9b-b223-a5ae9aa21741", "value": "768:HIgRHpEX5jb9xlbjPjTK0HW9oj7p4uVcqgw09V:H/t2p/vlaKWSjl4u+qgw09V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758263, "uuid": "bb2472b2-5c60-4580-b895-75af704d9bcd", "value": 31636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758263, "uuid": "b7ecfced-d798-423e-b651-34d9d05e7d3e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c69e5ed8-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "602a81f3-2d8e-478f-bc0d-f2c48e681062", "comment": "Malware payload", "value": "0db70dd13c0ba50edc5d2ffae471c4cf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "59632d62-77f0-4f21-941b-e22d9a901a17", "comment": "Malware payload", "value": "423a82c492567d0c06a6b91bb391887d3cf8b127da24c3a15f8790fdcc5cfc5e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "da9919cb-a879-4040-944f-310c0b962cb0", "value": "T126F2F1101D4F6E32DAF60373FA55069141B05DE6F88A79212A1C4DF4EDAB4CFE8B91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "d0ca2a2f-443f-4f6c-95a7-edd564da823a", "value": "768:KVasVz+3CLFKIO6Zi6CARvmVQihwwpi3CrBT3UV:NSbFKIO6ZPCivmUbSrBI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758269, "uuid": "d506caad-2bed-4057-9515-130d06f80c49", "value": 34580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "56c3d3f8-7434-4839-b1c1-ced09394a157", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6a3ede5-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727758269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "23a4c4dc-0133-4133-93d2-f3da67643b1e", "comment": "Malware payload (Mirai)", "value": "143109360e9203b8488813ad1234f5d6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "572782aa-f388-4150-bd99-1df95d11d320", "comment": "Malware payload (Mirai)", "value": "3a1aa5516281b1f85ec1d989429591bc8e341e0895257f459270cd68ee8b2ce9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "d929383e-acc0-4c4c-826f-7fd6dbcef037", "value": "T1555302108BD66579C0AE4E7CD16BBD2339C93D6580556E35A17C0FF6EAE20D2CA7C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "a0e47771-3bb8-4f3d-bca2-5c24f2edc57b", "value": "1536:8xvWV0ctBzvesa5tEvGwYHWeplj4l7iIU/KWM9:lV0I2sa5CGwGp28/Kx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758269, "uuid": "4425ca70-f65b-4562-8f10-1a39dbc30084", "value": 63252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "076ca06e-f7b2-422e-8dc0-97b1c8370c02", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6a59b10-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "21ea46cc-8c98-40e5-b1b5-c10b2738d0ad", "comment": "Malware payload", "value": "1fd5cc938ec92a5d97c914c07fb0af86", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "8e602ec6-42f8-4375-bbb6-059ae43089db", "comment": "Malware payload", "value": "0385561424f8d8d2c9e55ab973a89a4d653b2c391b8d0f9625530a682e730002", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "4d50fabc-8f60-4677-81ce-de4445e3c83c", "value": "T1EAF2E0219649AC36DE614E76F2EC5D02616C83AD76D63271F522C30BA38033FB7BD6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "54915171-4262-4b82-8d8e-8d960ffbcef8", "value": "768:NlcJkqIQBhAe3mbhxggyFfeaheyjVpMQALXh+Si3UE:NSfBH8h2gob9A+SM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758269, "uuid": "7a749a97-b3d3-424a-b81d-9679052efb82", "value": 35964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "c57a7cc9-3014-4263-a7fc-57e12e3d1351", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6c14300-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "3c0d1391-ec32-4e67-baa5-3e2916e5dddd", "comment": "Malware payload", "value": "8fd47dce07535b49fab1c2fbf2847d39", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "87d9dfaf-23d7-42df-b544-13134c03a935", "comment": "Malware payload", "value": "c497023782d8169bf697c9125f09f06aac498b334e791f1c84a7cf6d590c18b1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "acfbfe2c-6dd6-4a49-88fb-dfc80927064a", "value": "T16ED35C17B5C180FDC4DAC1744F9BF53AED32B1A91238B26B27D4AF222E49E205F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "7a74c1f8-b12c-416a-afab-fb04ec96dcfa", "value": "3072:79eSuygEPjt6qy9q2dKmDnYMb0gBd/gQyVGsdqml6caj:79eSuygEPjt6qy9qNeH2laca", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758269, "uuid": "8d26bc4a-911f-4662-8de1-08f616300f07", "value": 139800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "3ecc5fa1-6eaa-4ca6-aeed-ecc9bc5820e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6d436ba-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727758269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "fa93de09-eb5a-4b47-ae49-88ac6758c22f", "comment": "Malware payload (Mirai)", "value": "82f0be49be68bb081a66b148a403ef97", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "28008126-b6ca-4415-8982-fb276b6b9358", "comment": "Malware payload (Mirai)", "value": "6308353b159b2eda886a444788e50a4ddd1f975c37923eefd9bd81d7a12ac79d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "0595bd2e-e31a-48d6-9231-6568644406da", "value": "T17503E19CD81418CDC96E6E3745B22F5A6A85F481B3DBD74D86064C09E40A70FBFAE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "8d79aaa8-a62e-4d79-93dd-d232eeacaf88", "value": "768:PtiNiNdNpdTleEbUzNSINoBoxjB+/LXvwXeso1onP8Sw4WMj:kNiNdNHQEIKZ/LYePI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758269, "uuid": "f1995697-1f8e-4b1f-b8ef-fd15c1e55f2f", "value": 38496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "ca59fd88-ebda-49bc-985a-23a0224faae5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6dce81d-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "db3b591c-1ac3-4f59-af13-22d4d276959e", "comment": "Malware payload", "value": "d6c698034c844a20e668e9e2304f6138", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "a3f3a5d5-af35-4638-a36b-9da6f4bfd6dd", "comment": "Malware payload", "value": "a818d72503b557592a42a4837b9a6a66a597db89ef8921e3c896348b30c77b1a", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "ad4e380c-6113-4b97-a57c-9395e3c6b082", "value": "T1E4F07577F2AC3721C694901C9D8303C02937E10D1136A634C1BD83C87C72238CF967", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "a035f84d-ce9f-448b-9732-61a0ae768d1b", "value": "12:2tJmoWGBr/FHy2KmYFXJHw1v+QXmxKOkqF4q+VjMb:2Dmm7E2KmYF5HwsQXmWVQb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758269, "uuid": "697ffe35-c20f-4383-8aa2-222be2cf7bb6", "value": 557, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "c50513dd-6bdd-4377-b11a-1d1909e3b62c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6e20dcd-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727758269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "42faa8bf-78e2-4445-9537-cbc84621c7fc", "comment": "Malware payload (Mirai)", "value": "9addde3cdef0c6731f7d0e3ed092a301", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "7d6dbe8b-2222-4a27-a168-ca44a7814193", "comment": "Malware payload (Mirai)", "value": "0d840d5313f9a79f8180b0c1c3c4a4d9e9b4f34bed28dc9b7d21869ffb421838", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "5e55c27e-94f3-432d-92aa-9c5342142001", "value": "T11203F1328141FD51EF70E4B5FA7AE3A4FB9B5B3082582856122D0796B3C7488F6F40", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "9fe56ad1-1caa-411f-a55b-2a964c9e7a36", "value": "768:j4v4YFa1j6cMcWey5J++hjidQ4pqDIhzjIqpv7W9FVq3UIoU:jbYF66tcpy5J/ixpqkqqpv63yx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758269, "uuid": "c3c5a086-5e5d-4337-bca4-cb558e470c97", "value": 41060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758269, "uuid": "c246c699-fc81-4949-98de-6913682af7c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c70a563a-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758270, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758270, "uuid": "42d4dc1b-f457-4f76-aca4-eb97e6f0de72", "comment": "Malware payload", "value": "951fc1eb2b0413250d834f4f42889303", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758270, "uuid": "a2ef1ff5-8791-451a-882d-93d37576db5d", "comment": "Malware payload", "value": "14c33a07b8fbd82fd47a0705dc198ad570145384d2813a4588733fe7c65143ed", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758270, "uuid": "57dfa7e9-6b79-4a5d-a3da-08a975310099", "value": "T1B4836B22BA361E23C0D5A07711F78721B2F153CE25A8C62E7D720E9EFF255406587A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758270, "uuid": "9a800362-136f-496d-bc0f-d28d7fcc57e4", "value": "1536:+xR2+EIh/3HPqknVwqJ3L//Y4QvLhFylT5BI2tBwwbZn2R:65ZRFtaMlNBJwwbZn2R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758270, "uuid": "d6ba2249-5702-46da-9156-9e9bd984fa5a", "value": 83984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758270, "uuid": "33e3327c-a5f3-45ec-8254-fd1e6b74bb3a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c70c6456-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758270, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758270, "uuid": "773bd97d-483b-4edf-bd36-ab2911b3d623", "comment": "Malware payload", "value": "2d93faee605942c626b9ae2963fd7145", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758270, "uuid": "daf00165-86eb-4255-b76d-835ce45f1bc2", "comment": "Malware payload", "value": "360937a7a1d8e37bf94bb2a5b58fef21807f39101ea49eb064fed8c85f918125", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758270, "uuid": "bccc32ce-529b-4d76-ba05-80b74e6a5ada", "value": "T17463AF66D9162D94C04A827060E8CD793B93A5C462A73EBA16F5D276C803F9DF44DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758270, "uuid": "6b3d6ff6-dd92-47cd-bd89-e184c3f09f0c", "value": "1536:B/E//8AYtaGz2isII6qkIQ5VqTVkBwyvKq6kJumMuCxaGswbZnN:Bc8l9VsIOkIvTgLyqcmMuQswbZnN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758270, "uuid": "544c5887-cbba-42a3-a76a-e64241157d07", "value": 71608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758270, "uuid": "c49e04b8-5d90-48ad-be65-57df58e12a6d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c75daecc-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1727758270, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758270, "uuid": "a24b45fc-f7dd-40a7-bd4a-3557dfd63478", "comment": "Malware payload (Mirai)", "value": "8580cdc2029cafca09e91526ab00468d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758270, "uuid": "de1b6d04-89de-42d1-a526-1e7167aa687e", "comment": "Malware payload (Mirai)", "value": "6f3a4a076d6b50ddc1d6caeb07fe23813128ba2bf032f9115d8f55e344ccb4b1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758270, "uuid": "ddb2ca99-53a1-4c59-802b-784bf029e99e", "value": "T1E0F2E12D1031E5FCECA749F2516A8BA65BD00726B21BF8871F43D1532D3756828CBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758270, "uuid": "9003210c-3e73-47c9-99ed-cc10309ee562", "value": "768:jxI6EJ2q/pOK4XT43j2bBgvrg0UAHdtQJgGlzDpUYse:VQIq/R4XT43aUPjQVqYF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758270, "uuid": "443fd4ad-cb33-4142-a536-0e878c5bfb74", "value": 37532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758270, "uuid": "d76d0b43-9ce8-4d46-92c5-cc444424c9de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c761092d-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758270, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758270, "uuid": "70a34c8a-88f5-459d-a9b2-e14543be062e", "comment": "Malware payload", "value": "2767440cec8b39f845f8c836595fe5db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758270, "uuid": "cefb7c6b-be22-46f5-b8e1-dc7951a55836", "comment": "Malware payload", "value": "64992833ac7b15812fbc447147f5117aa32d86ccf9aeb6909f164f4f865f0f75", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758270, "uuid": "c5260f2a-c3e2-4f18-9d05-0339dc50b9be", "value": "T14E833A9AF9019D7CF84BD67A44160D0AB530B2D01BA30F3B63A7BDB7EC321A56C16D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758270, "uuid": "d3e596d5-f0ea-487e-b4c6-8fb0870dd679", "value": "1536:C0m6lD8dQO/Gdo2PEtk31e+c8zqY+pT7GcYnPTOl1M+TaeTBnbj:tO/Gdo2PkEe+k37xqH+TaeTBnbj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758270, "uuid": "b7c4dc8c-7977-4adc-b5f1-81eeccdae9bf", "value": 82976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758270, "uuid": "8bebc16e-5c68-4f54-86e1-e743afba88d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7d5f4ad-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758271, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758271, "uuid": "00f9c08c-8f62-4779-8549-a40cf8b33766", "comment": "Malware payload", "value": "283b0085b923a3bc9c48ec64af0c588d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758271, "uuid": "534b430d-e611-4181-b2db-ad922992fc1e", "comment": "Malware payload", "value": "43c7281945fb8a234fc42f2cb447068b4de3f5aff87e77f9e6166cc4b09cef81", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758271, "uuid": "ca0e0bca-c28b-4a1a-92c3-369acf8d9eec", "value": "T11831E4C98901C713492EDE123377DA84AA26D8E1A7C58FD7FCC48537C58B564B507E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758271, "uuid": "6307e385-94af-498c-aff6-404c02e66887", "value": "48:oS/L/y/DS/m/H/ASMJ2SrSjSufISNoNSMJ2ShchSkxuSrtrIJSgdaSZk5SqrkSpb:oujODuifA23EVCB4xcdYtq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758271, "uuid": "d5e8d3d0-93f4-4b51-975b-0bacab5337b9", "value": 1828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758271, "uuid": "6f538129-68e1-4dc0-aa66-9ee09342d1b5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad1e9cb5-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758280, "uuid": "d4e533c6-a4e9-4a50-9ac7-d866cdae8f4c", "comment": "Malware payload", "value": "babcacd7b95eb52f94be323ea9e885e0", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758280, "uuid": "f96cb93f-6d61-411d-b7c6-929b85afc06a", "comment": "Malware payload", "value": "0f4c403ac1d2498023b9cba966302a162e240502c49ad30bce84723965583525", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758280, "uuid": "52484f45-c01c-4511-807c-8aea1c3c7fe5", "value": "T1244633AE8600E11E107B373AA6B1961A3DB73B5B4164FD73903B959F1E11A41B31FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758280, "uuid": "52a11dcb-08f2-4900-b282-a3e508b002b7", "value": "98304:Ua720xltSGCcQGFzUicClPDR6ujTBZjiP6vwX/ZzEw7jsju8Ojj5UqREnqBFk9qs:SEltSGhnRUicCFRXRZjcCwpE0cej5UUM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758280, "uuid": "8b6878a8-fe50-4af2-b86d-9752ba035af0", "value": 5868583, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758280, "uuid": "db4fa197-cf20-43e6-9a59-b9bdd5b1b733", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9b4129b-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "cba452b2-e861-4c27-9af5-140e53c41644", "comment": "Malware payload", "value": "efc69fea28d543e085d61682393969ed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "97f73a44-39db-47fa-ba05-7520b1b365a7", "comment": "Malware payload", "value": "e4dc9cc34c09a72d5765895827406f458888a45f91a286e91d85569df8f1f1e3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "57213b8f-69fa-408d-8400-8f4da63765a9", "value": "T1D2D32A06730C0A47D2632EB03A3F67E197AF9AC121E4F640355FAB8A95B1E335586D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "b4acd39c-d31a-4796-bfa6-58d46b44313c", "value": "1536:troGHNPTZN95IBUiCxfytKteQQvhDajwso7lbEJvAhh3rp+JuQfqAE87MnJ:3ZkUiCxRteKwF7lLhrMYnJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758328, "uuid": "52f9c0b6-5787-4d04-b6c2-204152adf7af", "value": 134036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "573d0031-d278-4d0f-915c-39527d336ede", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9bc4f6f-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "17735e02-9d20-4caa-b2f3-5b50be7e4440", "comment": "Malware payload", "value": "054cd6c06dc113ac3ca61f899bd4a732", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "348a59c0-36f4-4add-8206-d6bc458ba94f", "comment": "Malware payload", "value": "61c0339557ef7974e8940146eaeef05bb736b97ba4d08646eceddd86151d6434", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "b936b92f-0459-41bb-96e2-a191daa2346f", "value": "T1B804B719AB510FBBDCAFDD3702E90B0139CCA55B22A53B363674D528F54E50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "441ff73a-4ebf-4112-a8e6-3e582b4ace3f", "value": "3072:nKpzoYQeNkSfcQqmav8SqaRVlnYz65CVt:nKnQeNYQqmeqavlg65C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758328, "uuid": "c306dec1-86a2-407b-bdc2-184f594eeb4b", "value": 177760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "4e30b940-ff5a-4e74-ae55-286cd908c7e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9bcc58d-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "67e392c8-ff3e-4756-a376-01142a975af0", "comment": "Malware payload", "value": "5bca0aa42a9b4ddc8b944fa99b1badb3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "8804ca72-dc5c-4c45-8a79-f0f198c6eef3", "comment": "Malware payload", "value": "0b897598ca8ed3c5eecbd3901a0555ed2f0b6e7ac44333b6f669f3222cc6c781", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "50d03fb4-5528-494c-bd2d-196d5e82e904", "value": "T177E30B46F8814B12D5D111BAFE1E524E37131BBCE2DE72029D246F647B8A97F0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "473cd33e-58e4-4c78-941d-e78531e0ecda", "value": "3072:06neaYCgjU0YtxuX0TtjLvag+6Ct9Nd0/GGL2:deHCgjLSuX+tjDaECz0/GGL2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758328, "uuid": "aaa07198-e689-433f-ac50-daa153ed1ddc", "value": 144124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "603c3cd3-c63a-4a49-ab63-769a43c68bcd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9bd106e-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "b4319dc7-5d6c-4301-8d7f-f2772d10403f", "comment": "Malware payload", "value": "7db9b59a90e662ba446d456378a755ec", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "d9c1c89b-df2c-4bbe-98ed-4bdaa04860c2", "comment": "Malware payload", "value": "f0aeb571d717859d6d949e15aa655ef5fa11c1b5438b886f4c770e5e4c16feda", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "e6a5ede3-24f9-49f0-96cb-1b03ef464272", "value": "T1FC937CC0F683C4F2E84705B1507BE7379B32F1B9101AFA43D3699A72DC91951EA1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "8deeab4a-2d93-47aa-9143-c39ec430baaf", "value": "1536:W/QCZaxGdvtY3i5JPhofsxPu++4HRsUIKqI4FrS4LSf:WYCZa8dv23oJPhisxP5lR+KfUmDf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758328, "uuid": "0e7fa681-b5fe-40ee-b250-a287baaf7b54", "value": 89992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "97bd2cc6-98e2-40d1-a583-2254a94bf1e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9bd3ae2-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "99e17bae-75fa-4ebd-904b-dd30ea5a606a", "comment": "Malware payload", "value": "dd5a23f6a208042e7615306882e9dbf4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "70261d7f-3a86-408c-9218-f89db885ad71", "comment": "Malware payload", "value": "a45872b51822675d568a3ab2a45a1ff96091057728b394b888f4f4fde759f8dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "a081b91b-7262-4948-acbf-ceac83ffd34e", "value": "T1D8C31B45FC405B23C6C611BBFB5E428D3B2A17E9D3EE720399255F60378686B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "0bf0c33d-4ec2-4bfa-b4a6-caecfdd74cf7", "value": "1536:pXKG0rG5yC/NMChygtwOBdWFAcJX4VlgXTA70FoDUGBr7k51WhPV1lHFwywEReQ4:pKGpr3h7eOXWFh4UX40FoDJBkvWR2SR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758328, "uuid": "23a90dec-e3ec-4e0c-b3cb-6eed70d88b17", "value": 129824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "86d3764d-946e-443f-be6e-587fae26a9b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9c1cd89-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "27d8609b-63af-450b-bc08-9ff7158ec0af", "comment": "Malware payload", "value": "372cc3dc2c1692a33df82b9ff7f6b17e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "4aec0b86-b3d1-4955-a096-ae1ae94deed2", "comment": "Malware payload", "value": "621964557812518365e02ba160a5af7e04452d2c6537372f494c5d01088641bd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "29628202-4f30-481f-bea8-7c25d0686635", "value": "T1A6042945EA404B13C0D727B9F6DF42453333AB9497EB73069528AFB43F8679E4E22A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "ad7d2a80-ba86-48bf-a2b0-37e733fabe16", "value": "3072:dkjveCTgd84oALv2eEQakGzORu28zw99L/V3fqaooGM/ROCYFdLn:d8eCTMoA7TEQakGzORuhGL/V3fvVGM/m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758328, "uuid": "4f58c67a-a9aa-497e-a85a-af2a81ea223b", "value": 181482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "64b12cab-2d52-4ba9-a711-f0234702aea4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9c2059e-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "6258e49a-d6bb-4753-8b57-19e75d2a9225", "comment": "Malware payload", "value": "dbb560e1e9ce509195dbdf1727ac019d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "d0444e68-9b74-4877-b7c6-dfe540d10b21", "comment": "Malware payload", "value": "9a86e88dad29d829a5fc835b0748947cf7d80fef0dd4f9a0e986124144f854f4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "8ff0915a-668d-40d3-a84c-026f50a4ac98", "value": "T11004881D6E228F7EF668873147B74E25976C23DA27E1D640D2ACC1106E6029E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "e297f71d-e53d-4a1d-8bc2-d2a4e564179e", "value": "3072:jg57ld7LHZwbq1YSBan1yvbysxr1uGS8I:jglld7LHZ0Bqyy1BS8I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758328, "uuid": "9cbf839b-c487-4abe-93da-4b3d24e41b36", "value": 173888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "6a53c6e9-60ed-46e5-904c-75fbdeab6e68", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9c529a7-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "0ca6216b-7a20-4ece-955a-560c1b62283b", "comment": "Malware payload", "value": "caed0094e108a846181d26933f1d7776", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "3ac997a7-290c-4777-aae3-d06d5c94fb49", "comment": "Malware payload", "value": "d8a5d3d3be5394777ddfea3691c6dcfba8daeb427e280f8ff9ade092a9478ef7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "4303a389-e085-409d-87f6-003424c5bc09", "value": "T18C137C73CC292D58F168D5B0F8208B3D1B939E1595875EAEA523827AD103ECCFE0D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "c0683221-cf58-420b-b090-0a1e5d28b1c5", "value": "768:ZTNZiAgVlOg8bJD+aC/5xCzKZgoj9S9RVCX:F2AgVlOgaDPC/5xtZPjkRVCX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758328, "uuid": "ca70d64d-2bf3-47c5-8a25-1b3e10c95799", "value": 41984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "701738e0-dd42-4b54-ba40-d8180da6cb37", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9cf34fa-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "7edbbcb5-e085-42ca-a464-e988b98b9dee", "comment": "Malware payload", "value": "e97cf9a2dd731d604fea2f31179f3cfc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "5fafb297-41e6-4059-b51b-91ff1a909c24", "comment": "Malware payload", "value": "dbf3c010b562d9675e04415cfd05b79b71945fe273791451048a7a57c27b69ff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "43b9860f-7380-439d-9753-b47a1cc1989b", "value": "T163233AD2B500DEBCF48BE73680078908B572B75551822B376B63B977ED360D81A77E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "210a1f76-cf57-49b4-b390-be46dabb1ce9", "value": "768:GN5dWlDdlHLfRafGoPsmTUsyx5xbw8hooHO0by0t5vkjkUAmQd:GcDX3UsmgsyXpw8hooHby0tqj1A7d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758328, "uuid": "bd2e9b41-dd23-4689-889c-b357eea060ba", "value": 48428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "8a940480-a914-476b-990a-ba77b055366c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9cfb805-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "f89b78a3-5a02-4acf-b739-795dbd46e8ca", "comment": "Malware payload", "value": "b09158db96d8eafe8ad331e8e7f26382", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "446fed9b-e508-4b85-9de0-e20cf6ad5146", "comment": "Malware payload", "value": "274a8cefff93eb195c065faa2d16bc3dce0454e2a795a94a3190ae4a2cdb02fe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "7bcff0cf-35ef-40e7-a2d6-a29396e3abc5", "value": "T1B0D30845F8504B23C6C611BBFB5E428D3B2A17E8D3EF720399256F60378696B0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "14316496-5f39-4c24-a822-ae248f426217", "value": "1536:QKpzElm18umJNb4AXFa8eAZHk4VB7fzTTnf5mgYivCyeqZ/Z20lCmwyw6RNPUTuK:QKVY0oU8e947L3f5mziPtRZ55ZKR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758328, "uuid": "39523bfb-f925-4578-9e33-5ddd29b925d8", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "38a3aece-2573-4dbc-993c-18456cce8d71", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9d50703-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "62ea1b02-160e-4346-b678-06f8f59e4490", "comment": "Malware payload", "value": "b20ec2d6f3a3ecd835f2e249fa75c7c1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "432ee238-dc2d-4175-a7a0-8b043990a667", "comment": "Malware payload", "value": "a9a87c38055d1139450c36392c1b0471c582e4790f6d69ebc3ccca642752230f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "2caf9e83-3bd7-420f-bdc9-5d1392b265fd", "value": "T105E329C7F900DEFAF80AE33648570905B630BBE115921B372257797BED3A1991863E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "a8f16217-d7d1-4155-9893-139c4e242e22", "value": "3072:G5zTDH86JM781q5lZjApqGidS8w9aeVvjbieL/VCyIOH8bn:GtTDH86JqPjApq3du9a4LcyIrbn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758328, "uuid": "8370b52b-75cd-42b0-b82a-de57fc2ae35c", "value": 150464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "a133f063-7c2b-4b6c-926f-cc271e8c5d9b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9df5572-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "4a7501c0-f3b8-42a8-840e-910d12d50501", "comment": "Malware payload", "value": "ffdc6bcc2f011f6da21d6913e4bcbe5d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "6b522d00-e455-4ac5-8d89-43dc87d67c7a", "comment": "Malware payload", "value": "47d59ac4378e2f1592b85216004f574d6051d731fcc74e2280a997bcf7cc2d06", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "b04ea67d-bc18-492c-8225-9c8984222bec", "value": "T18C53B50E2E618FADF76D833487B78F21939837D626D1C285E25CDA001EB434D655FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "edc0060e-bc19-47b6-aacc-682049ba9c3c", "value": "1536:PsAHX80v2cM4R+/pimYWLr1qpl5E9dkFDfvGm/g:P71S0WQtLvG+g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758328, "uuid": "c4a4a4df-e0e4-49df-b724-3255fcb47733", "value": 65604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "6f118a5a-6e0e-4685-8f42-5dd9185bdfde", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9dfb74a-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "7672a9ee-8007-43bd-a083-d59327f21b59", "comment": "Malware payload", "value": "3a9486f09996be9a28fd8c257db9147e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "7078c974-f28a-4204-9127-83323958499e", "comment": "Malware payload", "value": "9c59394ee5c1a9e4bff92795814d858ba6f6a53c5ff14bb07a272bff28cb98cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "d935e662-6c84-483c-999d-62c4c0c4ec0d", "value": "T15963961E2E618FADF76D833487B38F21939837D626D1C285E25CDA001E6434DA55FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "1c4a8b38-5b8d-423a-85fa-db6d270a7bb7", "value": "1536:TIDunqDU4M75GvJ5In71qzoe9WkUTUP7vc//s:Tzgd9OM7Uns", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758328, "uuid": "2dcad252-fa38-4245-8f6a-f8cfd5ed409c", "value": 67992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "c54ddb58-2899-4809-867a-d55ad5292c0c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9e146f2-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "dd223c3a-0232-44c8-ae58-25829ff92c63", "comment": "Malware payload", "value": "f0c9a0ed5c7f596d1a4436ec1262f845", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "142c2a2a-7249-4232-a4ba-e4749d4c78e4", "comment": "Malware payload", "value": "14334b25b14a6f8d1b66878106604f2daaf7eda3711c1ff61021007b092bf652", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "2855019d-9d38-44d5-9a2d-07d3eb0a0530", "value": "T15263091AF8819F15D4D412BEFE4E418E33636B6CE3EE7112EE115B2467CAA1F0A775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "618b507c-fe8d-405c-8658-f6b4c310d1cc", "value": "1536:ehn3RtDl0zUftOBnvYkGKsYd1/gi8neeEmZWPluYidN7+R:MDl0zS8tBdZd1/gi8ne+7N7u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758328, "uuid": "ba458f5f-db23-44ea-b88c-7a0ce41f7432", "value": 72636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "ac034227-f976-4abc-a3e3-6ff6b0b926f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9e44b0a-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "776a455b-2487-4469-8da3-1456e14eed74", "comment": "Malware payload", "value": "d40e6f3da672b7573f82ce00d29c5bad", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "57c81283-da87-43e3-925e-e1372ecb3a37", "comment": "Malware payload", "value": "19e75c2d83b9325c3d5b458d2a100722c2eb47a365e9f64035b75eed74036be4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "37086d45-c1be-4f7c-8fe9-74ef0431bfbe", "value": "T1AB23F951BD91D907CAD5037BFA0F828E3727B798E2DE3207ED265F21278B91F096A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "47d20c1c-ff05-45e1-a253-d723842e162a", "value": "768:1kxf1D5F4numtJ0EsoMPdTcnMTdhHGwi68LNsv0+7sOijZd/JMyc+u:YB8MdggjidRZ+GjZdBM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758328, "uuid": "b1e50af5-1af1-41e4-b71f-0b606423a1b7", "value": 48712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "a858867a-7661-4fa6-b8cb-cc12b0910290", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9e5bd7e-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "b7cd3a77-ae05-4398-ae87-488b6f3c0268", "comment": "Malware payload", "value": "4c44011da0ec0ec90eb4a4d536ef3b2f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "8ab07b7e-e382-4a75-bdc5-4886056089bf", "comment": "Malware payload", "value": "61d1ed72bb45e7619cd0bddf929fc3ffd0b766e1a36a4fbd09f1597511a7ec00", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "c4d908ba-12eb-4b28-abd5-2404a217851e", "value": "T1A1230852731C0947D2B25EB4263F16D0D3EBAED122F4F64C3A0E9B4A81B5E376186D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "10322255-3c26-495c-a6b3-798fb81b9b9e", "value": "768:WnOkSHK66B9sK691DZjyVW898kS9xAp0lHAPM+18eHVqGnIjI6B+:W0qpaDIV9vS9xrP+WsqGIjIy+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758328, "uuid": "cc8eb631-8a7a-4e43-bb7d-aa56ea37ec8c", "value": 46184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "fc78c58b-7a74-4680-899d-6faad434fe6b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9e6a563-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "1800edad-498b-4b6a-a29a-bf8b0d678a3f", "comment": "Malware payload", "value": "11b383c5cd51387ea744fe7e99898e23", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "235486b6-7217-40f1-adbc-128cd7755451", "comment": "Malware payload", "value": "b30137e8a3b69a999f1bc465faf6b5f9c39cbf15949b088c20857b4d7571ebb5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "1b9c9da5-649f-43f9-973a-8513f3146ba9", "value": "T1AF431956F9C1DA15D4D4027EFE0E118E33236B6CE3DE7217AD216F2067CA56B0A7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "f6f909ae-b162-4995-8b29-110cd97338b0", "value": "1536:zOnD9IMwKCd1td/eltcxIXeeB1F70M2Ii6zw1fzJ:6LDk1X8DX51zw1fzJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758328, "uuid": "13317f20-8949-44b9-bf13-390503622ea9", "value": 59580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "6828b573-b24a-454e-8c0a-60345dc29ccf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9ed56e0-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "f5fcaa84-a031-436e-a0f0-e1825a1f5efe", "comment": "Malware payload", "value": "d9a7aa9334a95798c51095ad7f34a2ff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "acc945fc-fb66-48ca-af5a-ee06e6144b62", "comment": "Malware payload", "value": "f1860d8b5841f9bf5cd1b80ee57cc7658fef13e3a0a521d648badb996eb51389", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "873f1893-676a-4d30-be19-138cd6c8408b", "value": "T199639409BF514EFBEC6BCD3709E81B4635CD691A21B97B397934D918FA1A10B09E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "cc34c736-eb0b-4119-b5d4-a71d80e2814c", "value": "1536:Ji1LMy7zpVUugPp2biZScpo2U2hnZOmcI2:JihMyfTUugPY+thnj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758328, "uuid": "54c1040e-534f-4552-a6c6-6b5f955194c7", "value": 68072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "7f8c5159-f8e2-4dcc-aa40-823bb40bea01", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9f1d3db-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "1e85e2bc-bde8-41a4-9995-6867d67531de", "comment": "Malware payload", "value": "699406f5dfd3ba06103991bc5c5456b9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "a8f1aa0f-febb-4e7f-a5c5-41c9a3e77ad5", "comment": "Malware payload", "value": "835ba6bc85081c530c61b2f96f15b470ef2c84c087d23c89165e7ec1d11d1ff2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "0300af73-00b1-46da-808d-aa2af2e96984", "value": "T143333C35B9355D27C8E4BA3E70F74754B1F61B4A64E8CA0E7D720E4EFB60940621B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "4d3cbe66-4c82-4940-a5e3-22e4ee017878", "value": "768:Js7byuZ7rm1XoCwlXVr1/8VzR2RzC7nh/OP92U4mQnfnfRVO+29Z:MLm1YCsz8ZR2RzC7nh/u9h47nf72P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758328, "uuid": "dbc1d06c-fbc8-4201-a44f-da0ae3da5f9e", "value": 52752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "e304b464-2dca-41fc-b735-a8f5c89f6233", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9fcd362-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "3ecce9d3-8019-47ae-baf1-23765f789a29", "comment": "Malware payload", "value": "ddf20218fe707071156b22d017b2b337", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "0beff7ad-9872-488d-b8ed-4033abc6b586", "comment": "Malware payload", "value": "25cd38b7461dfc1bee3361d9ef4e3738a35f255b96952e2c59b55b459887023a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "fcf09199-d7b4-4c45-9017-bdc0c1bd2c1b", "value": "T1AE23F951BD91D907CAD5037BFA0F828E3727B798E2DE3207ED265F21278B91F096A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "48364104-8b12-4836-b93f-dce836d7b354", "value": "768:Pkxf1D5F4numtJ0EsoMPdTcnMTdhHGwi68LNsv0+7sOijZd/JMyc+u:CB8MdggjidRZ+GjZdBM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758328, "uuid": "5dc9f029-88ef-4fb7-b9c3-0c938f25e7fa", "value": 48712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758328, "uuid": "87926a30-81e7-4a25-851b-e7891a0fe59f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea6f8703-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758329, "uuid": "494a5a71-3dbf-4db1-99fc-fa68d5b8e479", "comment": "Malware payload", "value": "0efb03d43af1d9677fa7663d2b635d1b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758329, "uuid": "1c7e50a0-b9a3-4849-8054-94b75836bff8", "comment": "Malware payload", "value": "9488f371f32ea6c664a2a10f5cecabf36b202dbe3c4eea03161b5c2868f15de3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758329, "uuid": "6b7d0a5d-f6be-4f0a-8e2a-77466c488f63", "value": "T183F2E1C4D5285473C1621837EE7B8246BB54A371E2DD7173310F4ABC42EA1B3BBAD9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758329, "uuid": "90d73eb0-3982-4602-9aa5-69b929898d5a", "value": "768:iKJBGuh3XQqlC4BCPimiz1md34w0l5lNg3nKcbbDsqceOXIa9q3UELNQ:iKJBVTL9G4zl7MF/zceO6LC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758329, "uuid": "46a5a8c9-3cbc-4c21-8e35-9816765e3598", "value": 36416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758329, "uuid": "dc29a4a3-0770-42c8-98d9-df1d51415d63", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f6d1c38-7fb1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758579, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758579, "uuid": "43fe0aa8-e1fb-4b5c-bbb5-37ba486418c3", "comment": "Malware payload", "value": "f6151cb09c815c82e977c78007f53078", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758579, "uuid": "bf2add77-d68a-4f81-b20a-5b71d90a71b7", "comment": "Malware payload", "value": "5127fae14acb9e3bc0ceceffd3b289d8687c47af8776d56b444ef6e1b5cf10eb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758579, "uuid": "9a57e59d-bde2-40f5-8f8a-a035e4f33923", "value": "T15DD2F148B878022BE11B98FDA1E99CFB78A5B258D6C13F831F5DCD4E6F2D0489519E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758579, "uuid": "e2ba9913-c582-45dc-97d1-496d35b48efe", "value": "384:M1HS38FxbmDmmcqN75S3o+9Cnc+CZ3yD71VVkRzZONn/7lnTD36FMwXoclY3uzJ3:3MVqMincWDnVizm/h3QXY3SpM8TF9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758579, "uuid": "3b434846-a60f-42ce-ac08-df295a9675c4", "value": 31116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758579, "uuid": "7ca5ca50-790d-4e48-8723-abaf5d74e4c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d3512d4-7fb1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758629, "uuid": "9fe7fd47-5da4-4f4a-b502-0d156b1f27f2", "comment": "Malware payload", "value": "5732746bdcf1a26cc398efb8191b95fa", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758629, "uuid": "27871e10-26d5-4a7d-b7db-13b7a988d55b", "comment": "Malware payload", "value": "7f313f24a5bfc0c7846ac5c9a8e02d4bd0883f2188799691c75794804ed92d67", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758629, "uuid": "80678a61-2cc0-46cb-995c-e4a1ec8018bd", "value": "T1D2F2E1ADFA5039C9C46FDEFEA93C03140D50B0A927E786EE7F114C9DB214522E1B60", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758629, "uuid": "2f4c1679-d166-41d2-a539-cc767552c08e", "value": "384:3vqVljoXNcMRtUfoNTYS8KRgCbBU7T5yQSfzwHObA25U/wUGlMwf0CGixjhidGHr:fwlgtRA6U71y3Mp25i3ixSGooKcsWWo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758629, "uuid": "8f15ce5d-1e00-42a9-b0d9-6b951eadc8c7", "value": 35320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758629, "uuid": "e86dfc90-2d16-4b83-9e1c-3e138147f954", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b21f790-7fde-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1727758865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758865, "uuid": "9457ab14-86db-44bb-9a4a-2c54e4cc18b8", "comment": "Malware payload", "value": "083a8643df2ae93143472a9877eb212f", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758865, "uuid": "1868483e-3304-4440-a13c-49cba57ab65a", "comment": "Malware payload", "value": "54210d559fa9d89ed634317c4c145e72e5689cd85d984a82454b03b27cc03b4e", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758865, "uuid": "dbafb039-2750-4f22-9c45-48de8ce09897", "value": "0E42CF05BE52424BDD642DBA9686F401FB96039434BBAF9803FA9346CBF265E977010F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758865, "uuid": "89ffd8dc-6a99-4200-91a9-ba4c92f03dc7", "value": "384:TeV0foxTKXtuvwdtTX9KSyaBSBjeYTfo9k:TDoQtBTX941eYh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758865, "uuid": "2991f85e-add8-4a2b-8373-c655ed1aacdf", "value": 12960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7484b58a-7fb2-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727758990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758990, "uuid": "d8707525-5e44-46dd-abfb-c0c0c6ef2262", "comment": "Malware payload", "value": "3a6afbb9896de7db1b48213441c1bfd7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758990, "uuid": "410ff8ef-43d4-43af-af0c-586feb203b3b", "comment": "Malware payload", "value": "5ed824c1d57b42ae7727854581abb2877888ff26a8f7e6a4f2646a65c7d9e055", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758990, "uuid": "0ff762f2-be9d-4948-b487-6fa6ee03a7c3", "value": "T1A5E2D02A678294B5CE1876B947A2CB815F21B62BF1035C8BB6006B93BE4D1733953F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758990, "uuid": "e1f3098b-63ef-4ff8-9cab-cde34a7c647b", "value": "768:hhlz7R4i4AiTfG4aKSPelG40f2W6lV2uCHJgGlzDpbuR1Jk:hL7RziKLHPi5WkVTCFVJuW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727758990, "uuid": "9d152199-b23b-47ca-8f7a-a7997683570c", "value": 34156, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758990, "uuid": "fca0ffef-127e-4194-931d-cec98325c975", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1147a846-a5fe-11ed-af1e-82aee05be84a", "comment": "Malware payload", "timestamp": 1727759345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759345, "uuid": "0d0536b8-b022-4ec1-9825-bcea8c607ba9", "comment": "Malware payload", "value": "550686c0ee48c386dfcb40199bd076ac", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759345, "uuid": "86f48422-60a4-4fdc-9c59-be8247c1c756", "comment": "Malware payload", "value": "edd043f2005dbd5902fc421eabb9472a7266950c5cbaca34e2d590b17d12f5fa", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759345, "uuid": "21882b6a-9d84-425c-9873-9a1c8b5fcd0b", "value": "T1CAE47D26E352B427E48314B5D60D67B74C301F35476198EBEBC17E68AB716D2A238F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759345, "uuid": "20a3f1d7-aad1-4d2a-a1c8-9fa7dec719f5", "value": "f781fa19ee3108d3fcdb3967b70bbdf5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759345, "uuid": "a741c62b-13e2-4bd9-bc28-d5b71444e121", "value": "12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727759345, "uuid": "047c30fe-dd61-41d0-b9d9-9e7089c04bbe", "value": 685392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759345, "uuid": "406314ea-e1d9-46e8-a966-df0b2cf98e5f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11862e3b-a5fe-11ed-af1e-82aee05be84a", "comment": "Malware payload", "timestamp": 1727759346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759346, "uuid": "99576e71-fc70-4626-acf0-e448fcd5d483", "comment": "Malware payload", "value": "4e52d739c324db8225bd9ab2695f262f", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759346, "uuid": "7c027612-7ebc-4d70-810e-e7682f6c14da", "comment": "Malware payload", "value": "74ebbac956e519e16923abdc5ab8912098a4f64e38ddcb2eae23969f306afe5a", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759346, "uuid": "5bb147d7-1169-4486-aaa5-0e73faac5ba0", "value": "T102445942B581A474E49238B5315DB73A2C3A5621B3E5C8C7EF81AEB01E642D36F3D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759346, "uuid": "8ff2839f-49d2-4fc8-a0ce-59e6a1bd76e6", "value": "32ef7516974ac0c43943c0635266c6fd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759346, "uuid": "f3a1f1dc-d6c5-4f0c-ad55-59d38ecdc9cf", "value": "6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727759346, "uuid": "41a4909d-3c57-4d11-95d9-80a578c3eb8c", "value": 257872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759346, "uuid": "3f8b6d24-a02c-4bcf-a9fe-a8edfc27b121", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11d5c618-a5fe-11ed-af1e-82aee05be84a", "comment": "Malware payload", "timestamp": 1727759346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759346, "uuid": "b61abd4f-7928-49a7-922c-e89b44492d0e", "comment": "Malware payload", "value": "c8fd9be83bc728cc04beffafc2907fe9", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759346, "uuid": "1904adb7-415c-4dd9-a82a-154cee40fbb0", "comment": "Malware payload", "value": "ba06a6ee0b15f5be5c4e67782eec8b521e36c107a329093ec400fe0404eb196a", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759346, "uuid": "7078cab7-4d82-474b-addd-148e8f784a98", "value": "T140D4AE03E9D450F6E95239B2302FEB3E953427368B3488C7C7E46D955B356D2A2BB7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759346, "uuid": "c761903b-ec81-4390-8619-c2205f20613d", "value": "c190cce47c6cbf1ec0a59ffd2965da30", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759346, "uuid": "626b07b5-5c74-464f-8d79-8dcaad143d6c", "value": "12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727759346, "uuid": "b7e3ca32-85d7-4301-81ac-90befbf0f18a", "value": 608080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759346, "uuid": "1eeca357-ccbb-4d0f-8970-acd1485a32ff", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d8b0283-604c-11ed-a083-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1727759346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759346, "uuid": "f3c34839-b35a-4282-a373-873a47c4d811", "comment": "Malware payload", "value": "1f44d4d3087c2b202cf9c90ee9d04b0f", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759346, "uuid": "362fc755-45a1-4b36-80eb-e551f73ab340", "comment": "Malware payload", "value": "4841020c8bd06b08fde6e44cbe2e2ab33439e1c8368e936ec5b00dc0584f7260", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759346, "uuid": "31e0f50e-8efd-46c2-9fed-6d9734390c7d", "value": "T1FF356D4AEA07AC7BDC5302754617E39B0575DA70A833CB8BEAC81D68DEB3DE116097", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759346, "uuid": "51c2ce64-9bd2-4fdc-96e6-6b3926fe7498", "value": "e727d00364cd87d72f56e7ba919d1d40", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759346, "uuid": "d38ca7aa-114d-4348-ab04-ada93f8f40aa", "value": "12288:dxylSMUMifofI9ayCvcZMBiMjCodEMdo8R66tCWko5+jsbFcoYuprzpGSgGSrz:d4AMB3caSZMijBI1CWkoj5auF5gGSrz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727759346, "uuid": "3a3e89c9-cebb-47d9-a2c8-54e3992db535", "value": 1106998, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759346, "uuid": "d2535689-f871-449e-b6aa-39839197788d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "122c756b-a5fe-11ed-af1e-82aee05be84a", "comment": "Malware payload", "timestamp": 1727759347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759347, "uuid": "51f9acd5-655c-4648-b3f5-7b44ff16b44d", "comment": "Malware payload", "value": "1cc453cdf74f31e4d913ff9c10acdde2", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759347, "uuid": "61f5d342-7217-4d73-96ae-c9420b9fc0dc", "comment": "Malware payload", "value": "ac5c92fe6c51cfa742e475215b83b3e11a4379820043263bf50d4068686c6fa5", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759347, "uuid": "d9a5c314-b77f-4e69-b2e6-cb3bd9ec2431", "value": "T1ED959D52A9C9A0B1E84931B3B89EE7BE1E3053235B26C9C7D7940DD85F556E3133E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759347, "uuid": "2e820fd3-5c7c-47a5-855e-74407096e8e4", "value": "91b2deacd206ef373baa926022d03ae2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759347, "uuid": "be6f296e-37dd-4066-8983-be7d0d24897e", "value": "49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727759347, "uuid": "da7b9088-a8ef-4bc2-98ef-44520ee9a201", "value": 2046288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759347, "uuid": "7105b978-a146-41f5-8b62-477ab9803f5f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4df28401-7fb3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727759355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759355, "uuid": "6898b7ba-e208-4228-87de-57967f93ccad", "comment": "Malware payload", "value": "c6161555fb5750466e1ca93b3392892a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759355, "uuid": "281f3a6c-a8a5-4ad9-a9ba-dd8b6825881d", "comment": "Malware payload", "value": "f25d860d66be2c8a3cd3d50cdd488efd98a63134b9ab95d3b57613974e5e77b5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759355, "uuid": "2039bc49-e3fe-4cb2-9299-507c4bfeed6a", "value": "T174029E4EE062ED342C52DCA2DDA13228709DE04285F3BF54B9D46DF81F95405F764B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759355, "uuid": "fc994ffb-160e-40c8-afc4-27c864b960d0", "value": "192:/deHhUbh5uUFescMqUOZu9sqrbN6YU0MIQJgowy026kwhkGokbkU:/deBA5uUFehMqUOZu9sqrIYU0MIQJgoK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727759355, "uuid": "d6c08dd4-fda6-42a0-a127-ce9221a113d0", "value": 8953, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759355, "uuid": "66ad4566-bb30-4a5d-968b-1a050d623b29", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce42b1b4-7fb3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727759570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759570, "uuid": "1e3b6c49-7b49-4c33-a0fb-57cf992e5811", "comment": "Malware payload", "value": "6e7bf2f087ef5545726189c5cb75e36b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759570, "uuid": "9e08be2c-a093-432f-bdd4-8d9e1f450dce", "comment": "Malware payload", "value": "3719a9b05298943cb2c3b55edee9a47de75270e778f6a19da42e6607df849699", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759570, "uuid": "6ce27b5b-2b8a-48d1-8f0a-b954cb68eab2", "value": "T142B39DABF24716A0C86286F047CB4BDE3E6323826F5789E33D6E253918791CB4D05F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759570, "uuid": "084a8c38-e6f4-4b78-ba78-de8c5f68a6e7", "value": "1536:AQ3+6yJfaaMFtdD07sPJ2UBt4wIWSiCgNw/LWu:dOTapdD0AkUBtGWSiCgNwq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727759570, "uuid": "7543c2cc-90a9-4d1a-949c-3c7493a3706c", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759570, "uuid": "beb4d4ce-90c9-4db4-a6c1-e9b21755dddd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "261a126c-7dd9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1727759886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759886, "uuid": "469a0a46-c65d-4ab0-b52a-d1c61229df1d", "comment": "Malware payload (Smoke Loader)", "value": "e2d279a05ab5b654f96fe3d96801b2a4", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759886, "uuid": "47780068-2fe0-491c-9b37-2445578f755b", "comment": "Malware payload (Smoke Loader)", "value": "c74bf29a2d3b5c38f824eb82a5c0fde0448d7194c36250e5b2b8ec9663b27526", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "5dfb7ff0-703f-4566-a05a-d41a359e7f53", "value": "T1FB94AF1263E6EC70D66346318EEACFE4EE2EF8714D5766DB33546B2F28701A1C6627", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "1f522cef-edd4-4f16-ac2e-2e37a8850a90", "value": "09e0349bd7bb61f570cadf30667497e7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "edfd71c5-95f1-4bd5-9648-13ada13d5648", "value": "12288:wtjCzBdPMNBVh5GtjfJ8uq990UXNQUHl:qwMNBVNqk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727759886, "uuid": "efa30ece-2866-4636-8b45-01319042eba3", "value": 415744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "b50c4907-1c7b-4ba1-9b5d-184b2b45f67c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a7883e2-7fb4-11ef-afe5-82aee05be84a", "comment": "Malware payload (MarsStealer)", "timestamp": 1727759886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759886, "uuid": "9f170b74-b9ef-4757-9748-05e9dfa7f0a8", "comment": "Malware payload (MarsStealer)", "value": "dfd49d1326704cfeee9852999782e4b6", "object_relation": "md5", "Tag": [ { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759886, "uuid": "93fd06c1-d62d-4596-b320-1251e42e14af", "comment": "Malware payload (MarsStealer)", "value": "2280a0c18708cb5fd0e093e2f42350e3afb8f3ca31fd3279fc797a6c535532ef", "object_relation": "sha256", "Tag": [ { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "3afc1a16-31b3-4be3-88c4-7984a2e01a91", "value": "T1786423B165A41577FE4A08F732FFE4552E7149616183D2BA2009987CDF837011BAF3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "3d92175a-d512-4c5f-9ecc-5d62b614a49f", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "6af5005d-e2a2-4142-889f-18956728ada3", "value": "6144:b0VDzBghICYEQ4pirMkbnahpDVD9oX8Wnde3Ka+DWYBemn1gGsvYBKKbM3itHqOk:YR6W7dUirtbMpDVD9oX8WnU3Fh+l1gsW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727759886, "uuid": "59a5aefb-18e0-4d1a-80c5-0b96679846c5", "value": 334888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "09fef350-dd58-4e96-978d-10fe23b7cb5f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e32e0420-7f3c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1727759886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759886, "uuid": "db9cced0-fab8-4bed-874b-0c1fc2dfd332", "comment": "Malware payload (Stealc)", "value": "35bab7028aa376556c3236b773506a9b", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759886, "uuid": "abeb6762-c834-4d5a-94d7-845a56734c33", "comment": "Malware payload (Stealc)", "value": "3a03ef1bf1d9c906bbfbe60e96c21cc950d84695b1f0fe23ca6c0c12cbe0f97e", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "eef8047d-39b0-4f75-9b01-3f7dfa5c9cd6", "value": "T1B5452310F2B5C8B4C5F10A3529B156982F30F65610E28427F78099EFBA32656D92E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "cc74bb4f-9074-450c-afe8-37b3ad625c74", "value": "be41bf7b8cc010b614bd36bbca606973", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "1a9713dc-a9bb-407f-a75c-2217a8568f6d", "value": "24576:doP4FOo7B8Zbizh4H1voG+GBnh/AzWXWmPGuI:4CTiZblVvP/Az1mPGuI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727759886, "uuid": "ac2e5da8-7108-42b0-b506-9e5c49751793", "value": 1247830, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "1f318573-ab7d-4052-8e52-af40040c5d39", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a8f0097-7fb4-11ef-afe5-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1727759886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759886, "uuid": "387797e8-ee23-46af-922f-02b7756af588", "comment": "Malware payload (Vidar)", "value": "4f828f95c11479c61692052d9254022a", "object_relation": "md5", "Tag": [ { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759886, "uuid": "10328802-ae9e-41dd-8d8b-b74ae39a0fcc", "comment": "Malware payload (Vidar)", "value": "00c39991e9994d94f4fc657f7072c7e4137baf5aa27961cf5451daf6b3cda75a", "object_relation": "sha256", "Tag": [ { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "37baba7b-6d92-4216-ac70-40b3d560a43f", "value": "T1419423459D9D1A51E8E6C577F0A2D5278E377AEFB692C1AE683B04C3C78A1413AF43", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "2614d23b-ceea-4782-959b-705ce23276f1", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "fcde3760-7bf3-4598-9d33-fec678555e19", "value": "12288:V/Cb1GLhpCd9pwh7vCOT1VVx3nH8fwxa/bEO:VD6MPTHVRPxqt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727759886, "uuid": "401bb1c0-1085-495c-a171-4e2dfb9596b4", "value": 413736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "c0afe4b6-6fd6-411d-bb99-068eaa628325", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8aa7f9d2-7fb4-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727759886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759886, "uuid": "b135f18a-0b67-413b-b062-2a2bba9cbd7d", "comment": "Malware payload", "value": "c213162c86bb943bcdf91b3df381d2f6", "object_relation": "md5", "Tag": [ { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759886, "uuid": "2aaa69ce-7e74-4fc2-9850-49fd3027ed1d", "comment": "Malware payload", "value": "ac91b2a2db1909a2c166e243391846ad8d9ede2c6fcfd33b60acf599e48f9afc", "object_relation": "sha256", "Tag": [ { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "d0295aac-ad39-4ca5-b346-0abea9a24120", "value": "T17D851818F6D8423ED817D235DA3153B2D7FAB9482F20738A69280B5ABF673D01B357", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "277b588c-e97d-4744-92fb-4f338c6a2888", "value": "a89655faa2b6840e801be1e1c779fc67", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "ea51aa29-3d42-4c60-a3a3-39b565412d59", "value": "24576:+rKxoVT2iXc+IZP+6WiaTAsN/3ebTvK+63CWH8iA/iD2hgPjcC8SVdKumYr7:vHZGpdqYH8ia6GcKuR7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727759886, "uuid": "e413ce7c-c4b7-4730-a60a-ce8bd94cab48", "value": 1785344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "7eeb69c4-1ea4-4e39-b027-9270399a5588", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ab187ac-7fb4-11ef-afe5-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1727759886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759886, "uuid": "6fd3bf53-4472-4602-8495-0be6d485d577", "comment": "Malware payload (Vidar)", "value": "9a95bf64bb82802b60c903d8c870f61d", "object_relation": "md5", "Tag": [ { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759886, "uuid": "f46ba7c9-ddef-48cc-aa29-ac7fd9b1c69d", "comment": "Malware payload (Vidar)", "value": "dd2e52949ee517d8a0079b3847a9911abef05e2d6dfcc1bbae49ad5495de9a01", "object_relation": "sha256", "Tag": [ { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "1163cfcb-ed34-4098-a7ad-9a95408a6877", "value": "T16C9423CA0A56077AFD4C5B3E34BB5B03810B6BB1B4934E7760A5853F4F95B24A9283", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "f85ef842-896f-497e-afd8-17ea612a3a21", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "0320eff9-d680-444d-9de0-2d49850f0ebe", "value": "6144:lLhXbAjomx3DQIW4k283tPTw5hO8uNzPIE9TYFwjJUJZqAEuAQXEO:lL9bpmxDQIbkdwKrIGiwj0ZoQXEO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727759886, "uuid": "7ad0e8d1-44c1-472b-a6fc-55465eddccce", "value": 413736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759886, "uuid": "65f7fa82-05ca-478a-80d9-6ddc746989dd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad749799-7fb4-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727759945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759945, "uuid": "72b3c59a-8944-4e8a-aa58-2dbb364bc230", "comment": "Malware payload", "value": "a83b2a5ff3529936192398c88edd27a3", "object_relation": "md5", "Tag": [ { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759945, "uuid": "855b658f-85a4-432d-9c56-878bf3729c00", "comment": "Malware payload", "value": "a69839da451a8bf04259687309ceb825b1260186d353fb2555612ed006582e5b", "object_relation": "sha256", "Tag": [ { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759945, "uuid": "3e2a025d-357f-4d55-83cd-c8e3ad53ec18", "value": "T1D2C3B48C766072DFC86BC876DAA82C64EA61747B431BD203A45312AD9E4D9DBCF141", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759945, "uuid": "a97a32a7-e340-4df2-ab5f-86da55e09a9a", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759945, "uuid": "626d9e8e-be21-452b-b1b9-f2bc00b95920", "value": "3072:QJ4zfapVGYIC2MIEGuLuNP4FJed7eHnXm6qIXLE:8EypVnIC2oGuqNP1d7eHnXm6qIX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727759945, "uuid": "811497b9-6d3b-494b-9374-9f0450675ccc", "value": 121344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759945, "uuid": "159122ad-7bbb-4b79-87fb-ab8e9a24e276", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3109cf6-7fb5-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727760411, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760411, "uuid": "ca906198-5a72-48a7-a70f-48a2fd4944c3", "comment": "Malware payload", "value": "6699d82e7d7de50a6ce52dc5363fd01b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760411, "uuid": "15be95ed-d59c-4a6c-b49d-8e3bd586fcc5", "comment": "Malware payload", "value": "02ccaf2a3d3c2b7ebfbd1202ab771338724e3bb476bca28a80e6cb0c2063fca9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760411, "uuid": "b3c7d6cf-35fb-4199-8772-71ce1be870b5", "value": "T13F83175AB8C19F11D9D112BAFE1E518E331317BCE2DF72129D20AF24778A56B0E7B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760411, "uuid": "ccfa524d-c8cc-4fa4-85f0-6b520147a9eb", "value": "1536:HHnx0C0zv46Rebm7LHRuvT4vu/S1WupuPYGmkahdTfQ5Mvi2BUoQpCL7ol5PYNWZ:anLUT5SMupuwGmkahtBUoQpCL8lx6WZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727760411, "uuid": "d42fc1ff-0714-4371-8795-39751772cb42", "value": 88748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760411, "uuid": "98ade7c8-739a-4de9-8192-704ff847e65a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13222f38-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727760545, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760545, "uuid": "778eefc4-9743-42a0-b025-b3339c395af3", "comment": "Malware payload", "value": "4f78054b916f1a3f1077f700ce00fe56", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760545, "uuid": "cb62e1c4-e3f6-4830-8f8a-23e4b348fe95", "comment": "Malware payload", "value": "8a458b90483f30a4f0796a5cbd52220513cc8ba7a04ccec3de775abce8a8fa00", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760545, "uuid": "5c1c2d34-c6ff-47b6-8c37-3bad0b1a7514", "value": "T149732BDAF801CD3DF80FD6BA44674909FA30A39106C31B3A675BFD93BC721A55916E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760545, "uuid": "b997b577-2f55-4a7f-9558-f794b34c9390", "value": "1536:0nNNthriU/+6F2X8peWMh6D7dJIiy7uK3Cecaksn3:0nlhrb/+6F2HGhA7Jusn3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727760545, "uuid": "2505991b-6878-4b67-8930-17e04607f4fc", "value": 79276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760545, "uuid": "92e50700-9822-4894-82e9-ef4879fed2f9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15021594-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727760548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760548, "uuid": "61dd1dca-2629-4083-9774-628ebb2c99e3", "comment": "Malware payload", "value": "5a8d71a70871273127b0016819c8ae0e", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760548, "uuid": "c80eb4f1-87a7-42b9-a172-3020d28536dc", "comment": "Malware payload", "value": "114f78b9cf1714df274eef72892b2fd830993ddcec7937c62397c56075004ab5", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760548, "uuid": "7c38983d-6079-43e2-a259-658c0125c48a", "value": "T1E3833A84BC919F12C5D122BBFB2F429D771653A8D2EB3207D9256F60378B82B0E779", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760548, "uuid": "b91498d2-b483-465b-85c5-b897885fc6d3", "value": "1536:1R52hQuRbfZy7oODxeoFX5E5+6GtpfKNVJwaJhEiHV0UvEWW:1R5yPbfUDYoB5E5+7zsVJwtiEWW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727760548, "uuid": "6819ecae-49e6-4fb0-9a0b-3b2219e43028", "value": 81672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760548, "uuid": "b7f01b46-729c-43fc-8315-1ff84ea83633", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d915300-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1727760616, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760616, "uuid": "54244223-0c49-4e38-b13d-4ab5c72e2a92", "comment": "Malware payload (Metasploit)", "value": "fca9608841a34bf981486c0c1000c910", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760616, "uuid": "cb5c7d37-30d3-423e-93a2-e9e5a9b7fb26", "comment": "Malware payload (Metasploit)", "value": "bdfbde6a7c86951c60c4910e681e870bcc17554b6260ed6fd22c8930996c7907", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760616, "uuid": "bfb8784f-7671-4295-a2d0-0ac86434766f", "value": "T1EB16F255B4940B82EC285937A0EC2E51CDB54E08A3F290CF6FF53FEC71E45E986B92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760616, "uuid": "37cfbe04-c1f1-48c3-9ff8-6f19a9bbb7cc", "value": "98304:JyZlxPbmFUpGzUmxOw4ycDlAS88Yh+xRpiy9STTtz9Kwn0jI2:J0TCdJ43ZASpifpz9Kwn0jI2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727760616, "uuid": "db7b18e6-f3c2-4ca4-858e-29c47590f650", "value": 4408936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760616, "uuid": "fe9483a6-b8ab-4a46-b977-76f3b605ceb7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5525e78a-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727760656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760656, "uuid": "5300a4af-0aa5-4360-9ef5-f898fb5f42fa", "comment": "Malware payload", "value": "ae81c94a98746b091b6f578a1c2f70b7", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760656, "uuid": "335a8402-700f-4798-bb46-39ef3c93d97c", "comment": "Malware payload", "value": "2da7f29f47620628419d7390e399c7794df58db0889cfc9ad6bb1f8b9bed42c0", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760656, "uuid": "f3ced25d-a255-4993-8e3a-9fc7e0bc40af", "value": "T17D733A85BC819F12C5D1227BFB1F429D772A53A8D2EB3207D9256F20778B82B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760656, "uuid": "cadf6b6f-5cac-4736-9072-576cd68ce022", "value": "1536:iWufdP9RJhCmIPQeoFvCVE5/sBtw2r1BVyNjwhtvzTtkWW:xufdPFh8hoRcE5/iH5BVyWtLSWW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727760656, "uuid": "0c8c417e-29f0-440d-8a2a-36ea34c0e1a6", "value": 79288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760656, "uuid": "b052d299-60d4-414f-9fb1-3a44fcc514cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1fe710e-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727760785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760785, "uuid": "d42077d9-3feb-4c04-8db0-f1272ca7d3b8", "comment": "Malware payload", "value": "22d0e09eac4528d6ccabaca1cca63f77", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760785, "uuid": "c3b7589e-ee3c-4582-ba9e-5c28b8ae2840", "comment": "Malware payload", "value": "2842d8590483fd141230df60333ca7428eec818d4b2798f60079d51ff2b5961f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760785, "uuid": "24d0c962-fd20-400d-871e-e6bd04d72d80", "value": "T12931009D70528E3127B9C57C768065CCA5D2B6BE480ABFA4B103F46D385C368B0A8E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760785, "uuid": "efe00db6-7238-46c2-bf0a-1a9379537981", "value": "24:mz2znLNVEiAltrM35BFRDD6n0LY83H0tfhhp5wElMtUxxrwPYDYj7QW:my7LwhtonmzfvJlBrMYlW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727760785, "uuid": "f4d78344-6334-4df3-a5f1-42527c570f73", "value": 1673, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760785, "uuid": "1c04f2ab-a9d5-44df-ae34-4958fbab3f83", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cebf3898-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727760860, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760860, "uuid": "ed85f66e-cb38-4ccb-aae0-13dbaeee0bee", "comment": "Malware payload", "value": "e4b40384cc486e3031250ca937c871f5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760860, "uuid": "35236543-b39e-4b1b-85f5-0f0cc802ef05", "comment": "Malware payload", "value": "a07e4a00291585365074deff6627dc5e762b30c998bf812eb991a0cbc25d6264", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760860, "uuid": "2829f184-f976-49d9-a594-c5f0671d84aa", "value": "T10BB157DA7F217F720CB8DF11F2228A91B9A2D58604934F0A74FDB0BDADBED54B1119", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760860, "uuid": "22f9ebdd-8551-45d0-bf8b-92d6dd383ce8", "value": "96:1u6d+lsz1zyz7OzgzsczuzIUqfgM65e1f9fOf7CfMfsgfifIEcV7pTs3JITvV5lB:BYfp1FWDCE/6g1fyvT6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727760860, "uuid": "eabd6e00-7242-4725-a5ca-a892576c0474", "value": 5224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760860, "uuid": "8d54b2dd-e9b6-4950-bdf9-a5689856c04e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5bf0998-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727760898, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760898, "uuid": "473c8922-af7c-44a5-9ed8-b1ed1e3da87a", "comment": "Malware payload", "value": "f9093fbf41232f78cfa001fa42397a29", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760898, "uuid": "767ce2eb-891c-4081-b32b-bd91feb9b9e6", "comment": "Malware payload", "value": "afa7326b8eccf6afdcfa8505da1f7819c0477e3970f359079821b4721a4fb6c8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760898, "uuid": "28b8a4b7-dde2-404a-8b27-10ff74e001d2", "value": "T13C63E605BF914EFBDCABCD3706A9070534CC995A22A87B367474D92CF14B14B5AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760898, "uuid": "c9a98532-d2e8-4899-9b49-77b82e518c63", "value": "1536:o+EA/akilRCtDYPkocyJLTT88nKCZvwCk65uUz:o+EIJRiLTlnKCpPz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727760898, "uuid": "706dbcf2-a7c9-4839-be04-4c680953ae23", "value": 72844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760898, "uuid": "fd6e3461-16a6-4bfb-819a-f17e7da9547f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61365074-7fb7-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727761105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761105, "uuid": "3b90fadf-fe72-4d6f-be5e-769c46cfb45f", "comment": "Malware payload", "value": "21bd1c071f580fa64964651b78e2547c", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761105, "uuid": "5e563eb5-0d40-4918-9396-b4d11ae5d346", "comment": "Malware payload", "value": "ec3d28ee321b64ca0a418e1c6269fa447f0ea48b07dea6f4327ef5d32ac4170c", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761105, "uuid": "3e878d70-62ed-43e1-99e5-de23891cad51", "value": "T1EAA3B70E6E618FADF36C833447F78A31A75933D52AE0D585D2ACD6102E7024D685FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761105, "uuid": "7f01ad64-693e-49c7-8866-f4fb78be80b8", "value": "1536:aHlWJyHpfjNk1AWGUYoK56K57B5C8CS5k5turwYcdH81MUe610DNgeg0JqANWZ/i:aoEk1AtUYj5C8wBH81MUeS0DQANWZq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727761105, "uuid": "9a87a0cb-6a52-4fc0-a7fc-34680a243e8f", "value": 105648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761105, "uuid": "25a17d13-ff7b-4138-9426-e90792189d04", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "066ac0cc-7fb8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727761383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761383, "uuid": "cacd6944-fd41-4678-af56-2dad7db76909", "comment": "Malware payload", "value": "323b1877d5ded97cc27d3f925ed3a870", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761383, "uuid": "0b6512a2-73df-40b0-914f-b8c6d806cf46", "comment": "Malware payload", "value": "e67690413e16480faa362c88e010f91f6c92c2d15dba596c8923c9bb8193666d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761383, "uuid": "7fbbec12-bfdf-4296-9ae8-4425ba27bdf1", "value": "T17743F23A5B3C4A32F0922C725C62E8C3B5FA41F8C1CA69721114D964F9D9D1E37FC9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761383, "uuid": "262884dc-bc54-4c1b-bbba-be0f398e1d87", "value": "1536:xNke+FzC+jUNw/ycXdPaLygkbENPSmXpnc:xNlEjFqOPaLyMhpc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727761383, "uuid": "20923f31-5f68-4fb0-a310-29e6ca2b9397", "value": 57692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761383, "uuid": "5f015bd9-c5f8-4ba2-b4e5-acaec5ba2e2a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97155f13-7fb8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727761625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761625, "uuid": "1e52de70-3436-45be-8c79-7a1da3028c33", "comment": "Malware payload", "value": "af8caf7c6ee533cb45842479e59cf350", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761625, "uuid": "ad03b9f6-05a6-4572-9fbe-1f6ad5944a5a", "comment": "Malware payload", "value": "f0b1fdc86dc42435bb0bae51565818c7810edc601b25843b41915a654ee833b1", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761625, "uuid": "8d52e2b2-fefc-4a54-b7dc-6db5c1b6e101", "value": "T12CC3AFA1D93548DCB3EC9E93BEFCBB8C3669534FA3161E84835BB600EC6171C10924", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761625, "uuid": "964b0823-0179-4442-ad0f-e8e52288c679", "value": "96:Ea+M7j1nZp1NGZFDrE4b1yBb0JYx9w1Ec1d855Zwc12AT:Ea+Qj1Zp1OF3E4Byd21B1C31VT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727761625, "uuid": "66d7e5bf-6dfe-4e14-86ad-64e1e8306072", "value": 118538, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761625, "uuid": "4b57b0cd-5f77-4ef0-91d7-24a620fb3162", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "976d42fc-7fb8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727761626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761626, "uuid": "55958a7e-70f6-458b-9af7-1159bdfed4db", "comment": "Malware payload", "value": "7401654f00b94d828ea7fa91d5371bde", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761626, "uuid": "6df1bfb7-4cb0-40b2-9ee7-f2dd82e8c37a", "comment": "Malware payload", "value": "d2dc2492c4f02425762c0b890539c3c8f4d9cc30e7d05f35a708a9ea8f104ae6", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761626, "uuid": "a200d53a-0dc0-46cc-ad47-2c7ded090b6f", "value": "T1FFC3D224DA3008DDB3CC9D93BEFC779D3528639F9B9A2E55831B3906CC6074DA0844", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761626, "uuid": "b34dd9bc-271a-441b-a592-6ff525751319", "value": "96:Ea+M7w3Flawq7TFlP5wq78kvIz+FNQwFl+5FlvC5zwq7/5FlQAT:Ea+Qpb8uIa1T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727761626, "uuid": "5cd353a4-9d71-4713-87f9-68da547935d8", "value": 118618, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761626, "uuid": "4673f76c-3c05-494e-9583-a6cd0393675c", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb6eb650-7fb8-11ef-afe5-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1727761686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761686, "uuid": "c8a7bc43-5278-43d5-8cda-c0582ed69632", "comment": "Malware payload (RemcosRAT)", "value": "06288ac34c34b1751dca19951d6140f8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761686, "uuid": "8de4e83f-d01b-439f-96e4-8a0a37a02ef1", "comment": "Malware payload (RemcosRAT)", "value": "156b1cea1a2f649e332be482047de3d368f5f7b7e93eb4821692ada17a69fc75", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761686, "uuid": "4885f2a9-d534-4b46-aad7-43ddb9accf2d", "value": "T16F25E0C03B69B719DE794A349539DCB582B42E187011FAE62EDD3B9739AD3109E0CF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761686, "uuid": "58c9648f-8d23-4daf-b727-48b16699bf7a", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761686, "uuid": "179e8391-5517-4287-b468-949d56156194", "value": "24576:FyAXOCNGRx9s8Qbzjx84azkY9zIe8BIPX66Id:FyQOyax9sbjNaznzbmIvrId", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727761686, "uuid": "864086be-158b-4829-b8ad-5d624957acf2", "value": 1056264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761686, "uuid": "098f7bc8-5abd-439f-91f6-3e391e75951d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "065c4c11-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727761812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761812, "uuid": "160e966b-27fc-491b-b127-f563a745cf4d", "comment": "Malware payload", "value": "232052dccf9bf3ab3acd183b69389c50", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761812, "uuid": "2db1db1d-b12b-403a-9a74-8634f49f7bcc", "comment": "Malware payload", "value": "78cedcd9ab329ee4519da0a0a8757fe04ccb83edbb13d56536b3702d7215d744", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761812, "uuid": "de956724-ffce-4547-92fa-f4b7829f6407", "value": "T1F3B4237416C95C3089045BED2780F359BF5EBF5E26C896CDA0C9F94A36BBA1648703", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761812, "uuid": "4eaabfff-6e99-4a73-aadf-01fab45516bc", "value": "12288:s8Ucn6e7MvYCCPz8To8E9VqC8+YeUXCBI0SV:6c6eTCCPziov9ydCAV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727761812, "uuid": "a04ae77d-9361-4472-9727-dc7117e34e34", "value": 494656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761812, "uuid": "e10977ef-7942-4a3d-88f5-0ba2c097c51b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27cc9790-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727761868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761868, "uuid": "948c0160-d5d7-49ea-94a5-bb11273e3bce", "comment": "Malware payload", "value": "14b49dcb01461bfc4769023a403a5b1a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761868, "uuid": "758fd6e1-8255-4c43-a3fc-ec6dddce16cd", "comment": "Malware payload", "value": "1e8e511894d67dadb6441a4b9e9315d4f2ce396b89d6fc7631ee2ff5f103556b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761868, "uuid": "7cf3a677-a68b-4763-b06d-008caf1e241e", "value": "T1ADA49A73998E3BBCEBAB480178FFE2B5DEC1AEFFE8A3444177808B060554DA581579", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761868, "uuid": "90514989-2f45-4608-a788-cf7b5fb3e8ea", "value": "12288:8FtXgHSg3X58XaBqQKWrhirJwIQ/+kVNN6Jpz:8nXgyMX5yaBq2tirhFNJ5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727761868, "uuid": "c3f05a9a-5126-4951-93c4-9c82f88bbfd9", "value": 476220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761868, "uuid": "90a8f19a-2222-4bac-a879-e23164c36f26", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27f01a52-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727761868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761868, "uuid": "2508bd41-caa4-4b92-9fb6-a4a77561dfde", "comment": "Malware payload", "value": "cbf5ef0d187def69f296999441bc0c43", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761868, "uuid": "d6ca19d8-25f5-4295-bb32-55e1b1b470a4", "comment": "Malware payload", "value": "a0977a220d5a644eaa86a99f8bfd0ab6cb65434dd1723bf2e7a1f9c420ed84fb", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761868, "uuid": "60e52135-0ac5-4973-b1ff-a3402c0089ec", "value": "T1F4B423B619EC1326BC8DB31FC3A48E849DDA1F30969C259FE235AB9024912D936477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761868, "uuid": "924a6ed0-3693-4e96-a6cf-8325304e4dbc", "value": "12288:TBp21yY5b7iNX7RLW5yvxHpObKeLS8M8wAJ:dg1yYxWNX7Rq5yvxHpObK+S8JJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727761868, "uuid": "a8ad5b68-57b1-4fa7-a34d-b60ccf6eef1b", "value": 494656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761868, "uuid": "c51ebe39-3183-4d9c-87e2-c12efcc0c746", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27f5f649-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727761868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761868, "uuid": "d806aa42-57c5-4e48-8909-d479be92a9cb", "comment": "Malware payload", "value": "9994146e7fec5e87c3550bf87ba4905d", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761868, "uuid": "18d7b911-1b7b-401a-b5e0-b54ab544f39e", "comment": "Malware payload", "value": "8e491996000479178491164f27db61ad4f579d2b5d7d5a3e5c134532c3c72281", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761868, "uuid": "4dd3dfb4-5d03-4eb5-8d0a-d0b95e8f9295", "value": "T14CB423DFF0283A7C30DA769FF0BCFA0FF6E5B69A91E45D207BA55684705881093290", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761868, "uuid": "e627ebf2-b58d-44b8-86e6-6da4a56d6f87", "value": "12288:y5+DSWI9REx5Q/PcCa+bY9REtHai+lqmvjFTqOe5mZ:yQfq5PcCaB9RIa1qaWOeM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727761868, "uuid": "658bd1dd-d42f-410c-994c-d294f8ef89d8", "value": 494656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761868, "uuid": "332941fe-c86b-4be2-903d-d35c5cadc1a7", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b150e0d-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727761927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761927, "uuid": "5d7b4c10-e246-4030-a673-14f95aaa786f", "comment": "Malware payload", "value": "3973bbfceb04aa3b806d759f00a0f572", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761927, "uuid": "37e47efc-fd66-47b0-a7a8-6ba1f27b01d7", "comment": "Malware payload", "value": "9b630d788109ede714a74846aa42ce15ddc164c98ec2bcf02191bd2a9010b382", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761927, "uuid": "2b5ad811-d3f4-4557-b2e2-fc0d2379b892", "value": "T1CCA3128798F3E80F5C6393621859AFF1EE5A65F5AA4520E658FCF8F50382082E17D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761927, "uuid": "2732db19-1460-4d4c-a6cd-faed38042795", "value": "1536:+X9Lt77aAPysDTKmBJP0tWpKylWxltP0NM9XRr3VHCrjA6O+BdRHW333Y:+Nd7aAPTX70M4yOGNMF1VHA1fB/2333Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727761927, "uuid": "c590b36b-5576-47fe-870c-e6d8f93371d2", "value": 106560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761927, "uuid": "207b5148-3e3e-446c-8d0f-7023be83d1ba", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b6c0fcf-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727761928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761928, "uuid": "fd607955-b888-4472-ac85-1f099f756654", "comment": "Malware payload", "value": "c5139b3748a3d2e8508528467db482e6", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761928, "uuid": "61c3bc76-24e7-4414-87cc-325ef43114cb", "comment": "Malware payload", "value": "3e716cb2d2058cceb704989730f24517aa7ebe00b09fec07c2452b3dff6e152b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761928, "uuid": "142881ce-ee92-4536-841d-9eedf4effa02", "value": "T19BA4467C5B53BBA0E8F3A53124E75F1DED786CEF1B4A25C2E73A6662005BD8307928", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761928, "uuid": "6dc2e101-fba5-42c5-9085-0dfdce0ddf6c", "value": "6144:pJ7et8GT6mrC8gji2dLGdcTef6N26ZRfGo/jREAXAk8hlGsvnaJojktOZ20SeJrp:z7edCLegLGdpf6N26ZVvpuKqDP5h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727761928, "uuid": "06fdcb5d-4712-4177-aa35-9da0659e6672", "value": 491396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761928, "uuid": "ba8a5b6f-f90d-48c3-b2a1-67362abbcb04", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10a8f990-a5fe-11ed-af1e-82aee05be84a", "comment": "Malware payload", "timestamp": 1727762167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762167, "uuid": "cceb7d2f-b579-4922-a970-eee04c5988f9", "comment": "Malware payload", "value": "a37ee36b536409056a86f50e67777dd7", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762167, "uuid": "498942aa-0a53-41da-9a1d-2961c2baa2ed", "comment": "Malware payload", "value": "8934aaeb65b6e6d253dfe72dea5d65856bd871e989d5d3a2a35edfe867bb4825", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "dropped-by-GCleaner", "colour": "#cb3caf", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RecordBreaker", "colour": "#D67FD8", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727762167, "uuid": "3de1092d-85fd-4c86-97e3-541658b2efd3", "value": "T104839E12B4D140BFC5668470527AEE036B3D9A610BE58EDB6F98AD841F79BC2E7302", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727762167, "uuid": "4a18251e-fff6-4604-9e1d-920ee6eb8a24", "value": "6a84b7445ccacd5d29ac27de2745f356", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727762167, "uuid": "cd7ac5d7-3cb1-48ec-a068-d0e0efea1711", "value": "1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727762167, "uuid": "15d5d8f0-9b6c-41da-a33b-844b1a103d6f", "value": 80880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727762167, "uuid": "0dd10ecf-7a0e-4a78-8e88-e80857d0fb0e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16e7d3ca-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1727762810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762810, "uuid": "f05b9d51-b208-4b4a-a1c2-8bf5553d652c", "comment": "Malware payload", "value": "28e7fc8f2ed7f445e4c1afcf63c0da20", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762810, "uuid": "5ec349e5-10de-44d5-b23b-dc7b2bdcd351", "comment": "Malware payload", "value": "8fb63ac77379ecdcb5e40f0f280bfa9779e0315de8dd4e78b48f34b85e634ccb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727762810, "uuid": "75a8882e-bf59-46e1-89ab-09047719fd8c", "value": "0E03024633953F33E56248F4D3FCAF86615ABD54EFDE142BA4013A65B07225D28CD81A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727762810, "uuid": "61c946cd-3c55-4513-b2e9-9fffa8c8e133", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04Y:yYI0ARqw1qAEW67UIWi7M8gz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727762810, "uuid": "4d534e67-c7ce-49e9-a3a5-42153d890d86", "value": 39096, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "197c8abc-7fbc-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727763132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727763132, "uuid": "2cb765c7-27e0-4c0b-beb2-066cc5d1c118", "comment": "Malware payload", "value": "01cd8b0cd2b2fd0f9d159fc9b28b8588", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727763132, "uuid": "23d347ed-3dce-43bd-9e23-2543b7721680", "comment": "Malware payload", "value": "0a9244c3f37021da0fa31a688a5a06ecdcf65ad7cc86e6aff567a25b5f03de3f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727763132, "uuid": "f142c4c7-477e-427f-9396-e3f25454b1da", "value": "T1CF735B02B30C0947D1A35DF0363F2BE193AEE99122E5E644691FEB4A8276F321546F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727763132, "uuid": "95df560b-b5cc-43b2-9293-cfe71bd5476e", "value": "1536:wf0ddtAxn56QqdQlrBXOf09aB7vmH3IpKfcc9SQpC3Wdc:wswYAcLh83I8fg3Wdc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727763132, "uuid": "8253cc00-e912-4fc7-8fb4-6cb07744e1fb", "value": 79496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727763132, "uuid": "c2984202-1fee-480d-aa7b-a3a61ba65e2d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd8626f7-7fbc-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727763461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727763461, "uuid": "c23365dc-9de1-4c59-bc07-bfa65817db23", "comment": "Malware payload", "value": "927cd5a2057706ee14c84cbb08a95af7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727763461, "uuid": "dd798e3d-0cb9-4bc9-8c7a-591efb04a437", "comment": "Malware payload", "value": "b10dcfda2f6ce5ab307c631a73ce44e0019305317394d0f6a2f4c8512ae32539", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727763461, "uuid": "e815ba00-83fd-494e-9fb5-2f46796b6024", "value": "T1B483C60E6E718FADF66C823143F74A31A76833D523E19685D2ACD6112F7034D686FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727763461, "uuid": "e7e6625e-6d82-4d9f-901b-bd170ec2cf26", "value": "1536:5jETn05qcadqKdqALqHMxRt2xAEHB0goUkM015R6Hw0gyBgopHjPpNePZ/XU366t:uTnsqceRt2xAEHB0goUkM015REwmBzph", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727763461, "uuid": "5cf863af-8d7e-4f7d-bc9c-ad052f02f6fe", "value": 85168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727763461, "uuid": "95cbb059-9797-4fa9-961f-a1db4f5962a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9bfa06e8-7fbe-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727764210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727764210, "uuid": "56fdbbd0-cff7-4067-abfa-9891a4fe9da1", "comment": "Malware payload", "value": "38926810214d721dc2a96e503453434d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727764210, "uuid": "039c864e-73ce-4d76-8217-43a871f0a168", "comment": "Malware payload", "value": "122299ae1de733ea14805040e6638ed6648dabfd242d511b1b009ba0b160a70b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727764210, "uuid": "5ccc7175-d2b7-49fa-90b8-9d4ab163af39", "value": "T17CC2D1E07726FA31C4206C3DE53A4C8A3A51067C91FF393664258D398FC1A9B67B84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727764210, "uuid": "79054151-7ff9-4d42-b3cc-9bac4525c86f", "value": "768:eMKyhegCCMqfizjoNpd2vJdX6vwrb9q3UELug:NKy4qfqoeJdXWg6LZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727764210, "uuid": "a30c0c9a-5ccd-4b07-a303-8511593e79e3", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727764210, "uuid": "8d175822-c748-4c55-87f8-fbe107a08024", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c1ce921-7fbe-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727764211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727764211, "uuid": "80881daa-e491-4343-a7b3-f2818bb70405", "comment": "Malware payload", "value": "f533167ec410c86f57e781eb8c4e8b66", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727764211, "uuid": "d4a53a12-7de1-432e-b5e4-78b0922326f7", "comment": "Malware payload", "value": "b9c03fc173caa52bf9529fc6e728d24a57b8d6c785e8e70f686fd5145db523e7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727764211, "uuid": "f7ed4fb3-8fda-4fe2-bab9-8d3594ed297b", "value": "T10CB39CDBF24701A0C8624AF007CB4BED3E2723815F27C5E72C6A657969791CF8906F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727764211, "uuid": "4689ce82-0324-47e6-ab3a-777e73cc0380", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg1g/LWy:c9sSyzz36YaWWgg1gq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727764211, "uuid": "124d1ce6-02a0-4800-9c56-883a1ef33d05", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727764211, "uuid": "60d0a8d3-a597-4b65-af9f-aee2329ec1ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be8133da-7fbe-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727764268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727764268, "uuid": "345ab74f-d551-4e22-9da9-516c24ec3623", "comment": "Malware payload", "value": "c216ac7f64e8e102aafe69f9ab9e7fc8", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727764268, "uuid": "6fadbf68-db74-4103-b039-7ae6c79041d0", "comment": "Malware payload", "value": "626bc2adaaf4ec442e97576231b9920e452ee7ff6b3302c12608c3b1f226e102", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727764268, "uuid": "b1cd8032-7722-49e8-ae93-ee7fd500b958", "value": "T158A3F60ABF610FFBD86FCC3746E9074235CC955622A83B7A3974D528F15B14B0AE39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727764268, "uuid": "7cb069c6-3d11-4c75-9729-546654d11fa9", "value": "1536:8zh9icLJic3I8Oji80dDA1OrvDDeK8AdImxqVZVbf2yO1J/ND9o7qEWn:8zq2mHCUAIm0VCro7qEWn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727764268, "uuid": "3354d00c-dead-4799-a8d6-a42b343609b1", "value": 105648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727764268, "uuid": "3e89c71d-1632-44d2-8d9c-a11193fba145", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1d924c6-dfe8-11eb-bc10-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1727766372, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727766372, "uuid": "9473868d-ac0a-4c5b-82b8-3a45e3d9a1cc", "comment": "Malware payload", "value": "6b0fb88c187a6dbf48017f66f262edab", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727766372, "uuid": "1929120a-241e-4198-be00-7f5aa9e803c0", "comment": "Malware payload", "value": "ded36b111f815e57e2658bd881beaf247be1fea999902456df83840100f5ae65", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727766372, "uuid": "420185c5-9d97-4f15-bc4b-a726cb8ecc41", "value": "B9D3128BEF368C1FDB002E7216DB4B9E6C6D395B41CBF4A8F9C1818F13A11C57952215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727766372, "uuid": "a6a2c222-885e-4f8b-b268-656b0d30c9a4", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioX:p3lOYoaja8xzx/0wsxzSi6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727766372, "uuid": "e6c5b11b-9e36-4cb1-a082-295ba474da6e", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727766372, "uuid": "c9fe4cd2-46db-4dcb-9ec0-fb75fe64ef0a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "298cf063-7fc4-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1727766595, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727766595, "uuid": "8e39e2b6-69e6-4e3a-bea3-f60d2ad306df", "comment": "Malware payload (Socks5Systemz)", "value": "e27bc3f2453dac3ed58c534e56d76f12", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727766595, "uuid": "65c4d328-8984-4b3d-a65a-0f59a3251435", "comment": "Malware payload (Socks5Systemz)", "value": "ce3c34d9c4d6512a7b73c2074568fee35b8f46478cc0ea4056af1b656593ce44", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727766595, "uuid": "d2627fc7-4da9-42f0-8467-68ba48aba41b", "value": "T1CF96339476F781B4FEBD22B92D0F89CE0F73E44A8A9D509660098F1DAE54F23B8547", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727766595, "uuid": "4a3445e4-3b82-4559-bf9c-f8da50c11a32", "value": "80417b621299e3e1de617305557a3c68", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727766595, "uuid": "977c4b54-1734-4e6d-ab0c-556826a2dde9", "value": "196608:DQgeC1naEpa3WZqvNR1h50TJIQ/nAATRUqZ/tnAycRJI4y:DReC1nVa34qV301oATeqZtA2B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727766595, "uuid": "f64e764a-5c3c-4682-b2a7-84b2e15b27a7", "value": 8809349, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727766595, "uuid": "c93070bd-5048-47a6-b679-419b572cfb19", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa1c2950-7fc6-11ef-afe5-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1727767670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727767670, "uuid": "f408e846-037b-4b62-a27c-7363da481b36", "comment": "Malware payload (Blackmoon)", "value": "470656e17ed68b1e59d6f67d6ebbc6ec", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727767670, "uuid": "aa266f0d-d001-4d21-836b-878445a39cd1", "comment": "Malware payload (Blackmoon)", "value": "9326cd41be33eda5780ce76384f7792da2c54442de5aace46e7160507f0c734f", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727767670, "uuid": "55774e1e-b8f6-4412-95be-5965f741d2eb", "value": "T151C533DE83E92185F37B8D76F8B3D58914F3A9FB184707F413E4126B2AE806684725", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727767670, "uuid": "a062a55a-7601-4511-8b00-464939df98e6", "value": "71af65c6097d372e79a837f0c1915b60", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727767670, "uuid": "6c92e6e9-ff35-422a-8989-84be4a2999b7", "value": "49152:fBYAtA30mx/khTNJaQAP6YcPoqZPIp/EvJHq4AvSa3kDmyccJlXGBF1wLri8od6R:fBTm30O/UTNJq69oqZU/CHqRv7UDmYJO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727767670, "uuid": "575a7a2c-18b0-4e1a-b343-4a4beac9ae50", "value": 2711552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727767670, "uuid": "b7031f4c-747b-470b-a528-d7389eb25d12", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "679c80f0-7fc9-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1727768847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727768847, "uuid": "ff74914c-b5cd-461c-af70-8e102cea78f8", "comment": "Malware payload (Amadey)", "value": "10d25bf5401109c293b6d62b163c6a6e", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727768847, "uuid": "a6fbf74b-3c0c-4c01-bd02-cad29e8348b2", "comment": "Malware payload (Amadey)", "value": "92591bf229ab39b1bf1e3dacf616b9b8c27867e8abc3d9dbdce5c52935abb0a6", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727768847, "uuid": "68bb4ff3-36ad-4bd5-944b-a0e705baefd0", "value": "T1E99533E41ED0C42DCEC92A3FAF1BB738BE49960940B213B6A5FD45BC1227B588B49D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727768847, "uuid": "334c357a-79eb-47eb-bcd3-3cfeb464a5de", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727768847, "uuid": "025709a1-ce65-475c-9747-f026ab41befa", "value": "49152:oa//525Q6DbsDvE5P261oVr0JAjKNppbla8ZaTdm6t:oaghDoHrIJAjKNpPBZap", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727768847, "uuid": "6338fef4-f9b4-435b-8159-6f2bd8f0ff93", "value": 1917440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727768847, "uuid": "7996c7f5-53b3-432f-b97d-bd1f78f49737", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69bda7f2-7fca-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1727769280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727769280, "uuid": "a57d1fe7-6399-4d64-81ca-fcc4a75742e9", "comment": "Malware payload (GCleaner)", "value": "41228bac8057fa0ce75327cbf3054e94", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727769280, "uuid": "32f172b6-14e3-4bd5-bf79-5c9806891b60", "comment": "Malware payload (GCleaner)", "value": "6a942d205de3ed5d83ed3fffd6b4d2089547e68bff62587ceedd799523c6d2ac", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727769280, "uuid": "df27f263-f1b4-4842-b58a-277e3fd1011b", "value": "T1F894AE1392F5BD62E7264B328E2EC2F8366EF5615E19377A23546F1F18B04B2C2637", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727769280, "uuid": "5b3515f3-95a0-41a1-a170-96e3f6b2bd89", "value": "0ff2f2dbe7b709753f849909f1a6397d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727769280, "uuid": "2367e309-dfee-4901-945f-8a0d24474b12", "value": "6144:9nBtK0zWWIIuf5x7QxLtfuMg1OtyeEf1YW2GL7xsLmMEV/Ta:9n3KiWHI04Le4Ef1Y/Gpscr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727769280, "uuid": "4ce2cdf4-c1ec-4410-aaaa-2c903aa97e03", "value": 430080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727769280, "uuid": "41acdc70-f31f-4e90-9eb0-f411ee887fdb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19a0f9ba-7fce-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727770864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727770864, "uuid": "16aa679d-64eb-4ade-a2ae-bf7552d90f9c", "comment": "Malware payload", "value": "e93a674d88f40a2e42a3495ff96633ed", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727770864, "uuid": "0ca837b2-cc00-4c9d-928d-e2d4bfaf5cba", "comment": "Malware payload", "value": "d4ea442104b660f401d5d9a945ae0b6761f69a7b6a850ab4bfae440b349e4d8e", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727770864, "uuid": "8b3e2fd8-e344-4d6b-945c-9280dc10182b", "value": "T173334BC4A643DDF5FC6201753073EB328B76F03B2029D9D7D799A932AC59A019A072", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727770864, "uuid": "678d48bd-9736-4e49-968f-7fcad44297ec", "value": "1536:dF/mr1jyZbqk7H1f1TqCc0Z/vU3etZP5n0mZH:+r1uFqk7H1f1WCZket9hx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727770864, "uuid": "5bed0054-1eb1-4ff7-bd2b-6aa5a565f09d", "value": 51184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727770864, "uuid": "caa19fe9-13cf-4f01-ba0e-f0424023f5b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2331e05e-7fce-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727770880, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727770880, "uuid": "adfdb9c2-1a4a-43cc-96d6-c22e1ad17041", "comment": "Malware payload", "value": "c1d062d72ab2e78b1c5a5ed00283cb2c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727770880, "uuid": "d9af35ea-51dd-45c9-8feb-cddd3a79c062", "comment": "Malware payload", "value": "699b266dc933d4893e9e94cdf7ddc3f85866e366ba1071f02f3727eca94668f2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727770880, "uuid": "0252d09c-267d-44f6-b567-77c9493f1cf9", "value": "T1DDD3E74CED546B29C2E236FFFB5A41CE33270F9CB3EA312289315B5533C8A9659361", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727770880, "uuid": "77c56dd2-553a-4379-a9d3-4b10c2dc6bef", "value": "3072:nTGXm1bAWVqXCrrGfdjikjASqe7YT4c+aKuxGk42VZ9BKVuOFniW1gea:ALl4+aKuxGk42ZmVPF6ea", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727770880, "uuid": "dfb0f824-53f5-4804-9349-754c66905e55", "value": 137296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727770880, "uuid": "c8b1244e-ca70-412d-bf6c-38ee262a20aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1727771468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727771468, "uuid": "87ccaeb3-b0a1-4e35-8d91-15f1d00415c5", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727771468, "uuid": "33eea410-aa07-4119-8d64-03c2be6cb688", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727771468, "uuid": "24d92c4b-5ee3-4df2-aca1-7d1f94a14686", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727771468, "uuid": "28a5e5a6-34fe-4a7b-ba52-c4c27d1e72d7", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727771468, "uuid": "466f8731-e166-4c5d-a9cd-5c1488ebea30", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "948b973f-7fd2-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1727772912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727772912, "uuid": "c16d68ee-4465-42a8-a24b-c0d854d5d024", "comment": "Malware payload (Socks5Systemz)", "value": "1c8bfc9e187af953625f7112bdf646a3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727772912, "uuid": "c0512550-baa0-432d-a7d5-76a960d20f65", "comment": "Malware payload (Socks5Systemz)", "value": "a8e54186c2bc366d82633cfe61850e396e7eaef085c321a4cb3f913a133c9d30", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727772912, "uuid": "8961d0b6-601e-4d6b-9acf-26a0a61e2135", "value": "T112963392C32A0EB6E9FCC5319C6F9BDC493768631D34A4B48294C86C4B76DD28F1EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727772912, "uuid": "e324dfda-651a-4e03-ae4b-1c4085d7cc12", "value": "80417b621299e3e1de617305557a3c68", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727772912, "uuid": "859c646c-7ec3-41a3-8ced-7a8123f839da", "value": "196608:DJGUmGqSXDVIdlPkA4GZ+BgtYLrr0lhldYiFDhOZIK+j:Do+XDVIjkQ0BgtYoTldPD0IBj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727772912, "uuid": "c72f2749-8fc7-4504-9d86-3cb58d6a9996", "value": 8752828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727772912, "uuid": "3e94fa40-5816-4280-8851-7425c508040d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6469b8d7-7fd5-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727774411, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727774411, "uuid": "fe2bf0a0-3f9c-4d73-8ada-eb00dfab51f4", "comment": "Malware payload", "value": "873bd04e24ffd5ff03c7cbcb0390619b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727774411, "uuid": "dd68a625-6521-4199-a48a-7557dffe2d78", "comment": "Malware payload", "value": "02a9704a3a661c5c01658ecba3156cf65924af152948a3006f0c4b7b37024913", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727774411, "uuid": "2208bd24-76f1-4d3c-beea-fe1e367344b2", "value": "T1D9159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727774411, "uuid": "084ff8ed-4d35-4a0d-adc7-22d028e13d59", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727774411, "uuid": "832e5c8a-b982-4cf3-86bc-998cd0bb398e", "value": "12288:gqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgagTy:gqDEvCTbMWu7rQYlBQcBiT6rprG8a4y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727774411, "uuid": "dd39ccac-5c2e-4ff0-afdd-dca6352beefe", "value": 917504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727774411, "uuid": "3aef6e0a-28ad-4ee4-acdf-3141ef064890", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "297ce02f-7fd7-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1727774756, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727774756, "uuid": "4b4935a9-59ab-411c-b52e-1608f062d9de", "comment": "Malware payload (Socks5Systemz)", "value": "30ce12209e3542644a2904181a4673ef", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727774756, "uuid": "1f3a655c-f35c-459b-8f3d-88a593588bdd", "comment": "Malware payload (Socks5Systemz)", "value": "8ea7fe852386bb3a32bde1874ce32037858e5c4857780f97fab25aa9396f2546", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727774756, "uuid": "eda5c92e-a794-418b-b19b-d61a5c2357a3", "value": "T1F39633A92D854371F41CA6F51C2DB98C4213C8D49676A253BF7ECB3B3D48261DCB82", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727774756, "uuid": "57b85438-42f6-4ffe-a164-6b5615b1d76d", "value": "80417b621299e3e1de617305557a3c68", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727774756, "uuid": "eec173d1-50a6-4a62-b01b-c3711616c055", "value": "196608:DNWiuyZj20BQw55KMgbTx+h5RoZl/P16Sduw/gIXbMZ5US2f:DNKY20BQUwMoTx+6nl9du6uUSE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727774756, "uuid": "4ef027d1-6891-4e93-9aca-f6711fec356b", "value": 8809496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727774756, "uuid": "50281c6f-8f3e-4006-9484-e33908606a59", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa8a83d5-7fd8-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1727775402, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727775402, "uuid": "3f0fc105-fe54-4698-96f6-91571bcac207", "comment": "Malware payload (Socks5Systemz)", "value": "02e19cd6ef172d4546f5da25e4b8df2e", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727775402, "uuid": "ff51b0da-a512-4d74-9ec4-8108faaa0d61", "comment": "Malware payload (Socks5Systemz)", "value": "d202376424acce1dbaf6e71231c696bd56a1bcae89fdc6cafb521327adb48122", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727775402, "uuid": "b4c1dabe-8881-45b3-b001-110d7f45c34b", "value": "T129963302CD2745FBD07B9B32B4915B665322760CBD30D4A6B8B5BBCA7723F8363591", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727775402, "uuid": "f01a8b22-1820-411d-9301-879d731573b1", "value": "80417b621299e3e1de617305557a3c68", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727775402, "uuid": "63f279fa-aa50-41a8-a2fb-7d607606d38d", "value": "196608:DK3vbMnjRsSGfOevyxeRoxhk26M5Zy2wTPqcBm9r/C:DSMTO7vRR6d/5M2w73", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727775402, "uuid": "784b6754-a5bb-437b-b46f-96313467b8b1", "value": 8733135, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727775402, "uuid": "3a6f1c86-9dac-4657-b0c4-8cd6f54567e5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ace1fbe2-7fd8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727776915, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727776915, "uuid": "a3630c92-2d71-434b-8381-cade2c6eb6cb", "comment": "Malware payload", "value": "fc76127e2e452f6ab4ef59f87d983e60", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727776915, "uuid": "d3e04693-7740-4e34-878c-cc4e7b98e120", "comment": "Malware payload", "value": "dcc77d65aeb1fa9c17b0989f2205fbc10ce9d34d46c43da0b83b7e2a2da895aa", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727776915, "uuid": "4886c557-bd2d-41b8-b2ab-b49af2b2b98b", "value": "T199D63324DC5307610B3CA61D64E4F35AA9FF6603CA2D35B5ECD39337E2AE3D88A911", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727776915, "uuid": "8671a872-7655-4361-abd3-ab5b48d4db3b", "value": "393216:GJPwzCkNvpFVD46B4czLDJCBo4LlU3BkOUpkJ7J:P73zD46B4c3D6xAj4kRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727776915, "uuid": "2fa2978e-e8f1-4e84-907b-3df242affaa3", "value": 12977874, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727776915, "uuid": "d2778bc5-9382-4b2f-8756-e4bbe4b140fd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7938a88-7fdc-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727777115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727777115, "uuid": "6518a568-dd34-45fe-a1a5-ac5d5dd5f625", "comment": "Malware payload", "value": "4cf4292d8d5d47e804bedf38294473d2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727777115, "uuid": "efa2a36f-9db8-4b5d-9d16-7b23738b53d2", "comment": "Malware payload", "value": "0a8b4001cafb375f3e60d68f04f8cc361f25495f879217a83c669629fdfc477f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727777115, "uuid": "cca8344c-4349-4647-a3a1-8183bf4a1991", "value": "T1AF236D01730470E6D75693726AFB922F845A3EB20BB824CBF7D44D0E19F49D5B93A4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727777115, "uuid": "72bc1710-128a-4bcc-a741-80d0cc3d2a1d", "value": "24ffff844f7eed74e1f1064cc9840ba9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727777115, "uuid": "b606f960-37f7-42af-8086-04d861191ff8", "value": "768:zynb12Aw5J6HC4kq5Jp9bjAzhyY55J+NStcEeUlyqgZl4p67ehPC:Ub1MsHz3JDwhyWr+N95OTga6t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727777115, "uuid": "bfdfaed2-b238-4a0c-9cc6-0ca1aa8f3576", "value": 49152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727777115, "uuid": "7958dbe3-d6c4-4ee1-9bbe-c42df8dbea8f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21d1004f-7fe0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727778608, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727778608, "uuid": "dcc0abff-edd6-4c75-b67d-4407de2d1f55", "comment": "Malware payload", "value": "540dde740411af385954447f43f16156", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727778608, "uuid": "a0331dc9-af0d-4681-9117-3fd13831c929", "comment": "Malware payload", "value": "6767c608999ddac9d1fdef4e759d5e986ab9fb013f3fc709ae215b5973e0208d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727778608, "uuid": "9f88c82d-c1b3-4795-8c86-3b012dbbc64f", "value": "T110159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727778608, "uuid": "81502d8e-a567-4e1d-8901-ffa13efb2a91", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727778608, "uuid": "54af6e48-6b6c-418d-9b37-b6b1604aeac3", "value": "12288:rqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgagTL:rqDEvCTbMWu7rQYlBQcBiT6rprG8a4L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727778608, "uuid": "25a440b7-eab3-4a61-86ef-20de38053a94", "value": 917504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727778608, "uuid": "097c97a8-5247-4474-96ed-3ab4cbeac0e1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34e54993-7fe1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727779070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727779070, "uuid": "a087dc9c-f83f-444d-98a2-cc68909f82fc", "comment": "Malware payload", "value": "ffccbe5e307568281685e908bdac7f78", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727779070, "uuid": "70ab3436-e947-451b-a52b-12f523503f9e", "comment": "Malware payload", "value": "cdbba8b8e89bc5c40181c8a4e976e8040362fec9712549884629b7c5d3107ce0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727779070, "uuid": "ac9d1a1e-ff3a-4dd5-a488-b703d7eb0ce6", "value": "T156B3E80E6E618FBDF659833457B74E60A39833D227E1D685E2ACD6111F2034E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727779070, "uuid": "c8e8ade0-963a-4b53-8ee6-8daed18c464b", "value": "1536:M4RhlsoZTfzy//JjijLfoQVz0jGw3IDjlrnI1ryhb2d9U+We3Pke+YekRZ:MIlVZT+/V3GnI1rQ6dm+lkJYegZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727779070, "uuid": "aa0cddb9-9057-490e-b4e5-e0b00b65fda2", "value": 117640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727779070, "uuid": "4f394492-2b05-42b0-ad9d-3e27a58e2d3c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6ebac24-7fe1-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727779261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727779261, "uuid": "cb072320-71fb-4934-a910-5d5e6695ecf9", "comment": "Malware payload", "value": "645c76f844a5ce8d61389265e8e15519", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727779261, "uuid": "179d61c4-2718-4649-bba4-e12484e2f3aa", "comment": "Malware payload", "value": "86262343e4a0084bb7a6353cb60d536846d6697586e755dd740eeae21b62a0a6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727779261, "uuid": "530d2e55-d881-47eb-aaa7-64984d25a768", "value": "T16A935B56FC819B11C5C412BEFA2E018E731317BCE3DE72269D146F21778696B0E3BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727779261, "uuid": "3d6438e1-d7ec-48ae-81a5-2d172e5468cd", "value": "1536:bFnmZNPqa1uSu+TCRbFgXUTvBjp6TAa3Dd9CRNdUURi9gBi1v5hYmA+cd:kJqMVWRiWRp6TAa3lgQ1v3P7cd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727779261, "uuid": "c092b8c1-2b86-4d90-a952-1800c031425e", "value": 97396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727779261, "uuid": "87c0c84a-3367-4737-8511-c66ae0abd423", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "773cdfaf-7fe2-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727779611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727779611, "uuid": "b89e0196-4251-4395-adf3-d5486d6366c1", "comment": "Malware payload", "value": "1b723defa7c60d78c9740166d13a7f75", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727779611, "uuid": "b0933166-6707-4c4f-ab17-4d101712643d", "comment": "Malware payload", "value": "d33d5acb6b55fa9771552d304e7a3e3c65653645dec79b3afa167174c8ce0adc", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727779611, "uuid": "399c1501-41da-43a8-8e79-b055622d6a06", "value": "T1A8D6333E889111385B38F60B54E0F96B56FFA00AD30B28B6ED179673C3BE3949F554", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727779611, "uuid": "a61a6765-bbef-4f64-9071-6de57eb5cdd9", "value": "196608:aMCHv4M9CD/zPY8bhoBBJPwzCkNvpFVXv7shTLKvq3kk0PiGkkn:NCHiJ6JPwzCkNvpFVD467kJ7G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727779611, "uuid": "e30536f9-65fb-4505-801c-c6f82cec7b37", "value": 13171350, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727779611, "uuid": "d87f6a21-fa90-41b2-a30b-2a559ea31eed", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9399445-7fe3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727780124, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727780124, "uuid": "7c4729a8-1758-4ed9-8af1-61c3f14c8943", "comment": "Malware payload", "value": "9f78dfd8c5b4602be8fdfb2cde1e793c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727780124, "uuid": "815c1443-4391-4c48-93cf-a67763426e78", "comment": "Malware payload", "value": "b6de3895d7f29c192cc20b27af961af2d697666e0cc80e15e29569c873b65050", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727780124, "uuid": "84dc8612-8f0a-428f-8efc-d8c95a28fa15", "value": "T17647BFCAD1AE44D29C053FC998141ACB4B2947324A740068367FBD8A9F775FEC05EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727780124, "uuid": "2fc2e29c-365c-45b6-9e34-bc3d937ab3ec", "value": "24576:cs25hjmZX/5Tx56UcXOxKwiXUvNcVlTJdRYHJHHxpU2wnm4mjAs8zpjcjJ1xTd1b:J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727780124, "uuid": "599a1965-b378-475d-af52-c046cbd21f21", "value": 26586707, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727780124, "uuid": "60b8a08d-6a7a-4819-9252-b0e213676e17", "value": "application/json", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abe5184f-7fe3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727780128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727780128, "uuid": "0b05fcab-fe77-4fdd-91bb-3634f3a16605", "comment": "Malware payload", "value": "dfdab2b31ca41a6054aedac01fa66d6f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727780128, "uuid": "6d57d9fe-330f-4f79-829d-2b23bdc626ca", "comment": "Malware payload", "value": "085ead835f15bf555699317035f33d275d5f81c6fd3e45393da4ada1b40e9d60", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727780128, "uuid": "119b9139-b64a-4119-804d-b6eab09a9934", "value": "T158933992B9815613C6D523BBF67E028D372613B8D2EB7217CD21AF2533C696B0C7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727780128, "uuid": "d722ccb3-a183-45c8-9c35-79435b45cdad", "value": "1536:FOX4WKR1L+mOfbxRg6oVtRxadp/DOyeQQ+mVj0vZO+Iop:FOX4Wn7AtRxafjPmsZ5Io", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727780128, "uuid": "cdf6e18b-47bc-4943-a966-846481283b38", "value": 96300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727780128, "uuid": "9dd9c24e-203f-4b15-9d9e-61606aa0df25", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de571f1c-7fe3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727780213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727780213, "uuid": "810c9120-6c3b-47f7-b74a-aa826c0af2d7", "comment": "Malware payload", "value": "4cd1dae46fec75fbfa4cada896926155", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727780213, "uuid": "b70c24b2-b653-45ba-9fe4-1ea75e75d29e", "comment": "Malware payload", "value": "c7647e0fc6b0ac0667bc4c6a73e82ee290ae1a5063abacddf35f727769c7407a", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727780213, "uuid": "28e4c317-ccc1-4d7d-9978-b3c4f5235de4", "value": "T188C633B87E4FF81F6D6090B883E8D4309B2A7467AC5681B4591131CB19DBE73116FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727780213, "uuid": "ac835d59-7e61-44bb-a369-34448fc07777", "value": "196608:H+Dx9wNOI+WoG6+9ZlcjZ1sJAGW4e8Gkl99DSVewJE2r9DY/qPe0HJWbydq:HcQ4I+VG1ZUZ1jGHRGkl7hwBxDCqPJHY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727780213, "uuid": "e8d19c6d-a5a4-4db2-8679-0ec9a3856ebb", "value": 11963174, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727780213, "uuid": "3ca2278b-465d-44ea-92d3-171e4ec9968e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ded404c3-7fe3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727780214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727780214, "uuid": "902448d2-a28b-4a0a-8c82-d62ea866a9c4", "comment": "Malware payload", "value": "6d1746bcc9b9f08f708c22871fbededa", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727780214, "uuid": "30bef030-cc2d-4a0a-8f3e-7fc1ca3ff23e", "comment": "Malware payload", "value": "d9c5062c6193e3dfff2723608b8d9d14580b3907484ab859b58ac2e84506d77e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727780214, "uuid": "66f2676e-5ffa-4370-98d8-2417b1e458e1", "value": "T158833C0375C180FDC499C274472FB23AD972B06E123DB2BA27E4FF266E88D205E5E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727780214, "uuid": "7443d529-d51a-4cd4-a046-b089b5c88bec", "value": "1536:8h88HHGzZ1rLvPwHnLu5bcs7q0ykxd7gr52Ry1DbWoMAGz7E7InRBd:2HHkzrLnwHLuJcs+dakr5h1DbWTz7E7+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727780214, "uuid": "f2e773b4-6bf3-406a-9ce6-2afdcb095993", "value": 84192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727780214, "uuid": "2a75a6d7-bd19-48c4-8d1d-37a4da49bf26", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c3ac339-7fe6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727781176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727781176, "uuid": "0174bd1f-c734-4b14-89f5-3b5d04a87bbc", "comment": "Malware payload", "value": "21f1c75bdebd54165bb409e19fcf4f2f", "object_relation": "md5", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727781176, "uuid": "f93ed7fd-31b8-4862-9adb-6b7a38da7625", "comment": "Malware payload", "value": "0e6a87373d0e9df0fdce2680b4a7aaa1096b5b7ef90106d7f618f58a33c86c8b", "object_relation": "sha256", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727781176, "uuid": "c4b36bf0-e56d-476f-b905-c5c24f8d3d2a", "value": "T158F0E1D257503021E3FD306DE719DB888235A30F7B5183249B9D80C0413A9384F4A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727781176, "uuid": "f0f5ff5d-9034-4492-b274-854dfa9bdc0d", "value": "12:LNrmo8+4PtL0SZzuJ6PncUV1dXnNQR5fj3Q/UVzndfDtuq+VjMEMwmXc:prmBHL1VwKcq1dCXfj3Q/qzd4VQECc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727781176, "uuid": "4209567a-2a59-43d6-afe5-fb9e9bbc449f", "value": 568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727781176, "uuid": "70cc2a6a-0936-4a71-9fa7-660a48c05f71", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b068cabd-7fe6-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1727781425, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727781425, "uuid": "d196b49f-b4ac-45c4-bd74-d048f4e1b4ad", "comment": "Malware payload (GCleaner)", "value": "d6fcf24a33071287f807a883636a57d7", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727781425, "uuid": "ee08a1c3-8cae-499e-a0cc-9d97d590966a", "comment": "Malware payload (GCleaner)", "value": "b9788e38d5ff4c3303bb45e3e8b4e7906e47f474ad16ccf0126e83d5020dfeb0", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727781425, "uuid": "fbad9998-d520-4b95-9a40-21b7e7793495", "value": "T1CA849E0352F5BD61EB624A328E3EC2E8765EF5225E19377632186F2F18B0572D2737", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727781425, "uuid": "e5168de6-0546-4fa5-b9cf-74045295efef", "value": "21a9431acd9a3a48d7ba150426a769cb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727781425, "uuid": "08dcb8c3-a9a9-4870-ad66-e782a3ac99b0", "value": "6144:iYAfmCheV1W7e5OJNUNbSg4t0tezJQaoHIe7A1QH9YjFgcGGeuoyT/Tq:iYAO8ykRJCNb5S0eU41oYjFnGGeoTr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727781425, "uuid": "4b1e9199-c47a-451f-8421-c26cf2586cb6", "value": 399360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727781425, "uuid": "ad2bbb39-4efd-49dc-b64d-41eedbb24767", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca571b98-7fe6-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727781468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727781468, "uuid": "7c2e8742-7d24-4536-9510-c05b5933bb94", "comment": "Malware payload", "value": "b4ea787f10f0108de68362bacf25033b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727781468, "uuid": "98088a58-9665-4a81-b2a6-a3ad8cea14ee", "comment": "Malware payload", "value": "8583db7150106a76a951b33eed7ad90efa913cfa7aa6b262c0b7a280e12fd491", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727781468, "uuid": "f978f15a-ad2f-45d4-93da-bb43ab01b242", "value": "T174933992BD819A12C6D523BBF66E028D372613B8D2EF7217CD219F2133C596B0D7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727781468, "uuid": "a3dc0115-ba6b-48d2-89c2-b04dfd523e08", "value": "1536:Hasp7Et3Gw0XxCkjMGY6o+oatSWx/DO6pkDI1vyTJO+fo:Hasp7VboatSIgDUvu5fo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727781468, "uuid": "b1bc737c-c331-4be0-a742-a8f02bbb4db5", "value": 92228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727781468, "uuid": "d0a0ea83-7cb3-4b68-b91e-152e63fe529c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c97fd5f2-7fe7-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727781896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727781896, "uuid": "2ddfc8aa-50a3-485e-94c7-293a3a7346ae", "comment": "Malware payload", "value": "18a77fdf41c036f087caffd69d610161", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727781896, "uuid": "8e5c3050-2353-42f7-b60b-762d655265ef", "comment": "Malware payload", "value": "88626cd243ed11d51de7c8bcca68841f98aeec737c294201e91626052f3e6dea", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727781896, "uuid": "cea12972-91af-4095-84c5-e0e3fe3cf912", "value": "T16DA42329F372956BF6F24738517B4BA62B6453697F7412FB18FC01FE681868422732", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727781896, "uuid": "be6dd7b6-7596-4220-9e88-5c51791d6819", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727781896, "uuid": "633e9c23-f514-4b20-8ab3-a0c6a07d4a10", "value": "12288:GV8kNBKYLiLZlsunoXnl5bAW7sdcDUbf98jeiTJPURQJ:g8+gY0sumlBAW7s+DiFDit", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727781896, "uuid": "02f4854d-9d97-4594-9f49-ef3cf47bbe5f", "value": 460800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727781896, "uuid": "fbdf5d43-c42e-4aa1-8b46-7b78828bdc24", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27905439-7fe8-11ef-afe5-82aee05be84a", "comment": "Malware payload (Meduza)", "timestamp": 1727782054, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782054, "uuid": "dab71462-69f9-4f4c-9d32-4f6ef3b98a12", "comment": "Malware payload (Meduza)", "value": "4a4c31024d2aae1fe33116aeb73fce39", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "meduza", "colour": "#6c09c6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782054, "uuid": "ba81736c-061d-451e-be2b-b1c81e2b4faf", "comment": "Malware payload (Meduza)", "value": "33a88f114a5ebf38ab95567ca6bf3585bbd56946226b7cbd609f73d1540fcde7", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "meduza", "colour": "#6c09c6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782054, "uuid": "58398acc-faec-43b3-9a5e-5d0182b3d329", "value": "T1DCD5CF47E6B309ECC62FC17487978673AA30F82902347F6A5D90EB335E61D60975BB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782054, "uuid": "f3033c11-59b1-4d8b-9f33-830c97176cc8", "value": "0e0750c35df63bb238206afd3d987d7b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782054, "uuid": "b3d542eb-0072-462e-9493-85e3957efbc0", "value": "49152:aPw34yFJzSdhPzD0mOd4606hU6HzntCR+W97dXx3F9vaV804K8wbLrut7A:F9mOd46/opvau0TBLruu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727782054, "uuid": "bda25e48-ba38-443f-b415-6c6b4d3ee451", "value": 2811904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782054, "uuid": "3a8a93f7-8b37-4197-b246-2a402d832399", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30e43147-7fe8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727782070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782070, "uuid": "a1ea99fc-edd9-47e7-9552-7e461c91a8fe", "comment": "Malware payload", "value": "f1be92b10d2136e3bc2a29efaaa6e81d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782070, "uuid": "51edfd3b-6532-4f28-8e7b-a3a73b8d7d9e", "comment": "Malware payload", "value": "2d05a78850fdc5d093f82f82519c55c0ec686de6e7aaa1a3678455d8cf987eff", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782070, "uuid": "672d50b4-0c54-4757-8f71-4a252ebc8d71", "value": "T186044C47DA418B13C0D627B9B6AF42453323AB64D3DB73059928BFB43F8679E0E636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782070, "uuid": "5e022051-c02f-44e8-a76c-3b1a3470100e", "value": "3072:zBhQMaA0ReRmaYyTASNxz7z2UEVHp3dNa70sRKvJLGM/9XkCZhmfw7WWLR4:zBhN0goaYyTASNxz7XEVfsvRKvUM/9UH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727782070, "uuid": "f71bf594-8bbd-402b-8947-5c1edfb1eee0", "value": 176389, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782070, "uuid": "6ed14953-bd17-47b2-b20a-6392479be53b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3909acf2-7fe8-11ef-afe5-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1727782083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782083, "uuid": "8f0d8404-599e-45a5-9fde-c86b3ba0e499", "comment": "Malware payload (LummaStealer)", "value": "bce1b06bde8f7271f7ab8e5aefcd0f42", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782083, "uuid": "90aac936-66c4-4028-9848-96f9ed6cb1ba", "comment": "Malware payload (LummaStealer)", "value": "cbe0c4c263505f6ef6094f89970a919b5d9a70b95d79ce26ab30c5edb874bbf3", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782083, "uuid": "d2468e18-c25f-4a76-8caa-8e442921e127", "value": "T150F6334BC4A1B4E76D37DA7C5532AB5B02CB82FB0A2761297847C034799BE8FC78B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782083, "uuid": "17a47f07-db7f-462e-bbe0-55bdbf15fd71", "value": "393216:z7I6fE17oixxMGpHNc6GPqfKxfkGEvAIO1O1MCwgh:7fE53xxMWcJqfKRkA1dS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727782083, "uuid": "297e2598-7fb9-45b9-86d5-d224d2711a9e", "value": 15276606, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782083, "uuid": "560ae689-f06b-4e43-a08f-410ebc5cad17", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "505297cf-7fe8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727782122, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782122, "uuid": "87abf065-7a7c-43b1-ab84-3b90f81c7eee", "comment": "Malware payload", "value": "32e6db9ec6c5dca97e77892f8f7fd74b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782122, "uuid": "a8bbf9e5-ae64-490c-94e2-af3cae19bdb7", "comment": "Malware payload", "value": "2300e4292f154ab35b72c2fda3746b3f332c55b77fffd95f10f043120ba901bd", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782122, "uuid": "afcac02b-c63c-43dd-9fe5-1c01c6bd3c4d", "value": "T152736DC0E9C3E5F1DC5616751337B337DB77F56E013AEA13C764AA22AC82610AA263", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782122, "uuid": "82bea375-db51-4c0d-9901-b5e0172a6811", "value": "1536:WfxWeexAJmDX7/ZYoPJF4F0hinJHC4Fd/tnbDydIZNNH7ibSNc8:WfANxAJmDXCZ0hCDX/tCiZrbdc8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727782122, "uuid": "d3126520-502f-475d-8467-b9e9726b21da", "value": 80272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782122, "uuid": "879d79dd-9221-440b-ab5b-8e02b21874d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cad6ade7-7fe8-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727782328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782328, "uuid": "d59f0417-d954-4691-9ec8-deb6a8421967", "comment": "Malware payload", "value": "342262b2c6e4287497b225513c099e18", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782328, "uuid": "e4a72991-1e38-4df3-958d-a5bbcce10456", "comment": "Malware payload", "value": "6dadef77a9830408bd0c53a3d5977bce30db9365d5c0f7ff7db20d5157303b03", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "GorillaBotnet", "colour": "#0d3c04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782328, "uuid": "96b8b7a0-3d0b-4da2-aeb1-1c1cc22fdef5", "value": "T10AC30706BF610EFBD86BCD3346BD070225CD685722A97B367A34E818F54A24F16E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782328, "uuid": "4c8c40bb-bdf0-4cb2-8ed7-702053c5e551", "value": "3072:2GEl5FmXwINyzF45de96+Q12RqJHAmeFW6gSzG92e9ltBCyZOWC1jtfi5yCL1Yak:2GETFmXmxFy9ltBCyPz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727782328, "uuid": "59559d5c-e7d4-4b06-82e7-8928dddf154b", "value": 120120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782328, "uuid": "760926df-56a7-4f21-8245-16cefa10f963", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3de6a58e-7fe9-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727782521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782521, "uuid": "c6531d4d-6d95-40cd-b92f-ab2e00c901bb", "comment": "Malware payload", "value": "30e7792e97b603a992240e27bade2a36", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782521, "uuid": "befabf2f-ca49-40d5-b252-4358667321bd", "comment": "Malware payload", "value": "c94f21254373c228e200a85422f611768978e785385d2802883cb1b75a0b31b0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782521, "uuid": "b469ac7e-0eb3-4491-ba49-90208542fd58", "value": "T13B4533045F8A8E52D811AFB5ED6FF5A31A1C9A75E62293020AD60607798EDFF3CE07", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782521, "uuid": "a31656dd-b213-40bb-b3f6-38ce1b43d86e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782521, "uuid": "e7511847-0dee-451d-83a6-fb3418f2d134", "value": "24576:87rIexTF/+W9FyWiZmN+InMO6JHZT4tapQgUTKO8YWAUc:ApX9FyWiZmQPO6J5VRZkWAU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727782521, "uuid": "fa5ffa6e-1465-4db7-9ac5-469b1ca637d3", "value": 1247232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782521, "uuid": "672489ae-dbe1-4e88-94b7-839a75a7b52e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a358d25-7fea-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727782998, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782998, "uuid": "820c5879-e461-4804-8cd4-3e33eb5cafbe", "comment": "Malware payload", "value": "6d951c3c9c3e47b4bfaae1bd39daa82d", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782998, "uuid": "ba39b1ff-3ba6-42e4-9b15-d4525394a4a5", "comment": "Malware payload", "value": "ced36934168828cf62a7f4caf878c5baf31bcd75594f3b1e9cda71818b6f7582", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782998, "uuid": "0bce1da8-f2a6-4168-9069-58e23c5df33a", "value": "T1FCF02076F6AC3621C690A15CA98303C41937E10D1136A634C1BE82C46C716388EA67", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782998, "uuid": "9333f32e-55a8-4d51-a9b5-86fe37a4d8ab", "value": "12:2tJmo8W6Br/FHy2KmYFXJHw1v+QXmxKOkqF4q+VjMb:2DmBh7E2KmYF5HwsQXmWVQb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727782998, "uuid": "68bba49d-071b-47a1-bbff-ea283661b487", "value": 563, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782998, "uuid": "d088ad81-3ed5-4bdf-8ddb-d84caa2ee804", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "162cfce6-7ed3-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727783407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783407, "uuid": "5bc157aa-9685-4233-864f-74f0482f8446", "comment": "Malware payload", "value": "4d7defddc37da3967d745b66bafd9ce0", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783407, "uuid": "e931478d-b850-4a28-829f-d1fd126fa490", "comment": "Malware payload", "value": "d2e5d4045f23c02dc74b787ad444b9b20ac47c8e1a314fe9e2f42a0e0e58d00e", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727783407, "uuid": "ca3cd133-1da0-461d-9573-1e2d82f90095", "value": "T1C1933A2AF6D1D4EDC56BD2B0698ED2E2D830747D1235706B23D87E381EBAD804E293", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727783407, "uuid": "6501ee7c-07be-48b2-8c37-f2c1ccb9deae", "value": "1536:ibDgocXisMwigcp86bqesjhMt0QtFaHHelMlkqSFetN2AAwwmSyTFu3i0Up9XO34:ibsnisMXset0sFaHZtwwwmSb3i06XO34", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727783407, "uuid": "fdecc0e2-1a22-4135-b603-21a0cd4d1c0b", "value": 92504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727783407, "uuid": "f7a9ea5d-293f-4efd-8c5d-01ddddc789ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8204252e-7fec-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1727783924, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783924, "uuid": "e75d9731-51e9-4a21-bc1c-ce1e589e00d4", "comment": "Malware payload (Socks5Systemz)", "value": "9919b98b0067ada51ed42a03ebbd81b7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783924, "uuid": "2b50154c-0e7c-4e5b-a496-27a7dd3f76f3", "comment": "Malware payload (Socks5Systemz)", "value": "3ca6161b17009411652256561935737af2212f7e2fadefed25338e97a3380b43", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727783924, "uuid": "4f7915b5-9f03-4fcb-893a-a73f40ad48d2", "value": "T16796334623AED84BDDE8CC733C4E9CB184E5DE240C3D451D358AD16D8F9A2994AECB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727783924, "uuid": "06e14c1a-5459-4909-ad85-f9d09b56dd3f", "value": "80417b621299e3e1de617305557a3c68", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727783924, "uuid": "27fc028b-8970-4a89-ae38-76858210dcc4", "value": "196608:Dkf1QOc2dX3kvw6Q/zqpMzBiI5cLgsrwbPAEOa3nt60O8ynGWA:Dkfi/q35BHzBirksrUzOa39O9GZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727783924, "uuid": "7580561d-f1f8-43df-8558-1410358a36d4", "value": 8796335, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727783924, "uuid": "4e8cb42a-ed52-4ec9-865f-629ded66e851", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ee4dcc9-7fed-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727784214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784214, "uuid": "e71769f5-68b8-4b56-b368-eab4b712ab36", "comment": "Malware payload", "value": "b5de5d3f61884f772b335f1167cefce5", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784214, "uuid": "1b00029b-b177-4253-b329-67a4bc3f989c", "comment": "Malware payload", "value": "3fd0472bfa958ecccaab2da5ae167dd64c47c9ab2c28a078ad8901a8d5762000", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784214, "uuid": "a2e37e27-6dd3-4711-84b7-088fc1773050", "value": "T18F24E03F7E290A865640B8838DDCF6B034DAB9E35A4D10639C7491B3EDBE57291B08", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784214, "uuid": "1e98d00b-36df-4b24-a226-f1466db83353", "value": "6144:xQzhlVdKqIJwgGG0J0NpYg8aLndfsYVpQko:xA+b5yGpj8UCYVpxo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727784214, "uuid": "8660a2c9-5d11-42e6-94d9-b28464f4f4ea", "value": 211032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784214, "uuid": "cdeee34f-748b-445c-b12a-2a24fd0b1603", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a415f8aa-7fed-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1727784410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784410, "uuid": "4d6e857e-0614-4174-948a-80aeba4c2020", "comment": "Malware payload (Amadey)", "value": "9d4daaf54d5ff93f895b27d5390d5a58", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ZharkBot", "colour": "#326594", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784410, "uuid": "8518f1b6-ec97-4539-acaf-140d4afd2230", "comment": "Malware payload (Amadey)", "value": "269fd0c1dcd7caedd0b7e9b616d7ae50ce656df1cb77491c52ae3e0186a3836b", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ZharkBot", "colour": "#326594", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784410, "uuid": "8e64d526-3730-43af-a4e8-08c2a9710147", "value": "T1549533FD1A92B9AAD233FA7354BA52E1B437059C259DCB423C83583785CFE372A407", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784410, "uuid": "853713e8-5747-451d-9da5-5f8f671df157", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784410, "uuid": "35d53358-7321-40f5-a03a-454f4ca6d024", "value": "24576:ok82D9P1DPyG0bnoLlMIuNN+g3c6BtsVXJiLPe+gXiUtlE+CgLlAgPaWt3P:ok8gDD70jy+fsOeP1lEl2iG/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727784410, "uuid": "8453c2fd-e0b3-4b57-92fa-285b9bd4f7a7", "value": 1891328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784410, "uuid": "2de48d8b-9c48-40b8-869b-195de0405f20", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a81e1856-7fec-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1727784875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784875, "uuid": "51ee3160-012b-4925-9bf6-9dcae813f194", "comment": "Malware payload (Socks5Systemz)", "value": "cb5c61e6e475f3aeefdbdc2300cdf6bb", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784875, "uuid": "47321b17-61ed-466d-808c-0b4e1f44ad62", "comment": "Malware payload (Socks5Systemz)", "value": "81607aa249b881140993a3c5fee6583bd2b9c337359d0798815ce70d6aa32365", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784875, "uuid": "887f757b-793a-4c09-a734-c1bc8ee62da4", "value": "T1C396338BEEC95072CEA9C135DCD9855401D2ABCB3CEC6472F3A98C9D40BD19E954CF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784875, "uuid": "091600f5-f0d3-44f9-8705-f045e3a007dd", "value": "80417b621299e3e1de617305557a3c68", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784875, "uuid": "7eb6e972-e8be-4350-817a-4c6fe55b7e29", "value": "196608:D+nmw7Vd71I1hMbI8xJ8vrEsvlTXUSuuIkP3kKN3HLeltrin0H7O:D+Ti1hc/8BTdHIkP3kKN3rw9i0bO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727784875, "uuid": "17d811fa-adf2-4a67-818d-d98f1c8e9ca7", "value": 8800076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784875, "uuid": "f95bedc1-e776-4a03-aa78-64161139f4b7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28823bdb-7fef-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1727785062, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727785062, "uuid": "d1e2cddc-ce71-4af8-bdc6-fa5b7ed5e811", "comment": "Malware payload (GCleaner)", "value": "4a699aacebd33e0e9b176808e9702d3b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727785062, "uuid": "e445eb63-991d-4706-9f59-3104e5b95417", "comment": "Malware payload (GCleaner)", "value": "81133be67f6c26eed99fc1098a28f568c87ce76c9eb7a45a8070ccf522e461d7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727785062, "uuid": "57e3e5ef-25e1-4c35-9d21-161f5d9ab1cb", "value": "T11F849E0392F7BC62E7264A319E2EC2E8762EF7515D1B3B7A22186F1F1470972D2637", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727785062, "uuid": "1de9b44e-f9e7-4318-958d-289729a9c6ec", "value": "21a9431acd9a3a48d7ba150426a769cb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727785062, "uuid": "16b01f14-282f-4d49-a078-3111e770a890", "value": "6144:iDdYC1v+NJdQfpYHK29//lksUdzFoHK97AnX+xY49wcIGPq/Tq:ipzB+dQBD29nGsMzFo3nqY49wHGSr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727785062, "uuid": "cfc9329d-e16d-461b-8228-6f6c8c47ad4f", "value": 399360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727785062, "uuid": "47281b91-fa13-4437-bc11-afa55b06f9f1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e980c0a3-7fef-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1727785386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727785386, "uuid": "f8c0fc20-0dd4-43de-ab5d-7478ccb6d38a", "comment": "Malware payload (Stealc)", "value": "5e55a47b6d7053f9d1ff19539863b8c2", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727785386, "uuid": "4225d7c5-3360-4897-a763-898c0178846c", "comment": "Malware payload (Stealc)", "value": "72c40603279789c395054781be9ae0b153ca29ebe3c2f9ff0cb609a603b5c545", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727785386, "uuid": "15d15be2-7a7c-4766-ba4b-61ad6e72ecf6", "value": "T10515232359614773F5DE0EB714701E7202722A3F9360A4D59350BFBE3972C428A6BB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727785386, "uuid": "01705ba8-13c8-403f-a877-180aa8c6bc6f", "value": "be41bf7b8cc010b614bd36bbca606973", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727785386, "uuid": "ae99f08a-42b7-4288-b543-6ace48c42da0", "value": "12288:ECXVJY0G8ReIqcEV/cjrk/BO27mOCNcnjaEpEEt/xOJUnjz/j/aP3hLnqZ:Eys07eFv1/4PwG/C5OKnjz/zwlnqZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727785386, "uuid": "b940ae8b-be45-44fb-b7cb-800ef0a8064b", "value": 931125, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727785386, "uuid": "d14aa036-f654-4923-8cbb-8f83cabbd0e2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf0558eb-7ff0-11ef-afe5-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1727785744, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727785744, "uuid": "3995f9ec-f4cb-4fca-8e60-4982a13f84da", "comment": "Malware payload (Blackmoon)", "value": "f57c36bf21a07898c9cc5e60e5960082", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727785744, "uuid": "3aecfeb7-e562-4269-a976-2a363358f195", "comment": "Malware payload (Blackmoon)", "value": "c12a5301d07908dcbc96b4dec07a5be26d1e28d59c978fed4ceeb8718d69c553", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727785744, "uuid": "78467833-db89-4751-97f5-e2ec6ccc3ef5", "value": "T1713533E7D6464F8CE6AD423B0E2C09CFDB7BA125EA0343F5C12A9C3F41A6A6B155C4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727785744, "uuid": "a1d7cb89-b548-4b48-afda-51611eeec569", "value": "7c9cd4d99ae86c9baa4d07bc5b4ef6e9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727785744, "uuid": "11c51742-eb51-4e1a-807d-197f79a78c2e", "value": "24576:T058PtULv+JJGQTQg8RTcqPI+LPQS1IvIyOIfftY1jhZJ5i/L:wGFeCGWQgSTcWLokIvbO31jh32L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727785744, "uuid": "fd9967d2-b13c-4cd5-bd6b-403c9be3b278", "value": 1064960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727785744, "uuid": "d6143010-d938-417e-b9df-e20d111a94a2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfca1181-7ff2-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1727786631, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727786631, "uuid": "af9eddad-2d72-4545-be71-8f75a440a64f", "comment": "Malware payload (Socks5Systemz)", "value": "eaaf97451cd6ccefe82967ee0700c0e0", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727786631, "uuid": "c503c0b2-1d41-4464-b4dd-1d28a8d934ef", "comment": "Malware payload (Socks5Systemz)", "value": "ffce28a5f7c392f206cd7c1b9acfa69b80b91aa2e28337cd0b92f0c887de5536", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727786631, "uuid": "e5d090e0-1899-4429-9991-e64be0c699c1", "value": "T1B8963361B3501E2CF42045398E1AB9960C3F6B8E5D39BC41264BCBE8FB67C71D7692", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727786631, "uuid": "401f7e42-f805-4a05-8604-7c89f4b1c746", "value": "80417b621299e3e1de617305557a3c68", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727786631, "uuid": "5b8d480f-bd2d-4747-9a7e-a4f0da0bb87b", "value": "196608:i1tFuXrVL0Ufc6AN8NowBdHZkBje6rEZNv1IUUGsuk8IVijHi3:isXrVTLrTZmjeNZNv+fGsuk8IVGC3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727786631, "uuid": "2f98e092-6d6d-4218-a405-2f5bf31de732", "value": 8788399, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727786631, "uuid": "3401a844-1ecd-4019-950f-3e0f3124ce3f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5453ca9-7f54-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727786713, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727786713, "uuid": "a7f38318-3d50-4af9-a1b9-92c51fa488f0", "comment": "Malware payload", "value": "65f8f3a608e39c409491dd5bca3b4882", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727786713, "uuid": "4e02cbbb-bf30-4849-9dc0-5e1ddc58c8b7", "comment": "Malware payload", "value": "ff10143803f39c6c08b2fbe846d990b92c6d1b71e27f89bca69ab9331945b14a", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727786713, "uuid": "d906f58d-ca2a-4b41-ab0e-8f725feedd6d", "value": "T1BEA6D562DD9782FEE79309B99046B37F1634AB05885DCA38DF40DBD1DB32A3CD4AA0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727786713, "uuid": "5a47409d-74e3-4956-a12f-cd6625bf1f55", "value": "208ad2c8c137e3d4c33022e4bb87e9bb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727786713, "uuid": "5b967175-4956-4fc8-9136-1000489b9848", "value": "49152:CxiATy66MxEIflnd9VlNPGOtSeO+3nXn0Ext9V6qrzDTAQg0JZ+Wm+vfYM8sF1l9:ayFMPtPVlVGO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727786713, "uuid": "656cb33b-d1d0-4284-9c54-b632188dec48", "value": 9984000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727786713, "uuid": "262a57c4-d63c-4658-9493-c30fd1ac895b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "752eecc0-7ff6-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1727788197, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727788197, "uuid": "f82baacd-d379-43cf-88c2-fa98b4a4c482", "comment": "Malware payload (Amadey)", "value": "703c8b71901c046f49c32bc0262bc903", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ZharkBot", "colour": "#326594", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727788197, "uuid": "d658fcfa-c6ae-4a4c-bc4a-299ff2dee04d", "comment": "Malware payload (Amadey)", "value": "27c11d7ddaa3f365beb7dbd7ac57f44e8c42cafaf4a9ee2e39a991d630f33102", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ZharkBot", "colour": "#326594", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727788197, "uuid": "e98beaaa-e194-4fee-a82a-404ee60dc8a0", "value": "T1E88533E53F7FA1BDCF284839842F57411D3439253CB568BB141D3AD8BCA781A2A206", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727788197, "uuid": "8d8d92ec-af43-4a55-b4d1-d12247aea092", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727788197, "uuid": "f5303847-77d0-47c9-aabb-4942d479270f", "value": "49152:EvBjRwj8/b72Y1Prc6SzQ7ULeUc9wdU6dRIS2Blg:IjRW+yY5c6J0elwi6r12Lg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727788197, "uuid": "4c281755-4798-47a8-af95-00f7bfe86fff", "value": 1837056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727788197, "uuid": "333fc481-32b7-467a-959d-6836d8445fd9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9ec28f3-7ff5-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1727788444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727788444, "uuid": "1bd559bc-d5ae-4ed1-9aed-1183df4f3751", "comment": "Malware payload (Stealc)", "value": "2b6a17cf5d76f7664806991d7619e998", "object_relation": "md5", "Tag": [ { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727788444, "uuid": "12feb7e3-8821-460d-bd13-9915db876bc2", "comment": "Malware payload (Stealc)", "value": "beb033b6b81e60ed419ba19985a2c7d1ffb6a4bcadf151e4686404079e0c7747", "object_relation": "sha256", "Tag": [ { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727788444, "uuid": "e2b0895e-c9c3-46c9-9b06-36943a7525b6", "value": "T15C8533763D27536DF1570438A4BF4D286071789168FDD7390B4EE286032FF39AAA84", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727788444, "uuid": "595d4508-2e39-40d7-b8d0-7ac46950c5d6", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727788444, "uuid": "855f549f-06ce-49ba-83a9-0dfde27055b1", "value": "24576:cLdBGtGG1W4UNJXbn4hHdXkoPPdYTngYY/Liz54HHX+kfy0gHOFTXVPZvC6GOgGt:iGjUL2yA2TzURfLgHOFTXBZ6ygG30n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727788444, "uuid": "e869d722-41a3-450b-95b1-bef5ba87db09", "value": 1841152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727788444, "uuid": "75f3e4f8-e8a3-4d7e-b4c6-76b270e6bd55", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9621b1ce-7ff7-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727788682, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727788682, "uuid": "b35472d9-c421-411e-8f8f-875d0de18917", "comment": "Malware payload", "value": "28f4aa5264e452b3b6d44ce952d0b753", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727788682, "uuid": "749250a6-d84d-4e8c-ba92-fd28510173fa", "comment": "Malware payload", "value": "edda936f37b0ca35e9829c5e1c0153a52a0bbe63ae114e6b6ae69b1323cfdbf6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727788682, "uuid": "9125192a-1ac2-496f-9329-4aab05e4f0dd", "value": "T136159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727788682, "uuid": "a27f6adc-2ea9-4bdd-a47f-a528c4deaf39", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727788682, "uuid": "ec8dcffc-445f-4153-8c20-7c3f3bb08c09", "value": "12288:GqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgagTH:GqDEvCTbMWu7rQYlBQcBiT6rprG8a4H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727788682, "uuid": "6727146c-0e04-476c-8121-591f871f0f4d", "value": 917504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727788682, "uuid": "405b5733-c150-4f9d-a4b3-c78919e0afb4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1699c40c-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1727789129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727789129, "uuid": "6ae8b27a-9dac-42ef-a171-4307453bf3a4", "comment": "Malware payload", "value": "21ab19d00f6577ebcb2e719b8a52344c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727789129, "uuid": "41141c65-2db4-45f7-a852-7b819bbe0f90", "comment": "Malware payload", "value": "898e00110e699b1381509252bd0614c8ffe8e04c7692678bf3eeaecf131f8af0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727789129, "uuid": "e96f03fc-7827-4600-aab7-0d6a87b255f0", "value": "D953020233AA29B196714AF1E7FDBB88E6493D588FF26C256C113D6CF97239D1CC4908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727789129, "uuid": "bec04e44-1f31-4d99-90ca-b2ced12bd3f3", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px2:yYI0ARqw1qAEv7UIFM8oJorFquyjT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727789129, "uuid": "37471572-ecae-438f-8d60-1bfbbd823258", "value": 65160, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ae424d3-7ffa-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727789925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727789925, "uuid": "0c54777c-71de-4383-9004-448d5c40891f", "comment": "Malware payload", "value": "0cea62cd27760e01b951d581ba2f407e", "object_relation": "md5", "Tag": [ { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727789925, "uuid": "3adf3fdd-cd4b-4a9b-aede-d6dd0d58daa6", "comment": "Malware payload", "value": "7654fd1ccc79e0c724b5dbc39010fa9a6189defee00e3f119e4354f1bf606d87", "object_relation": "sha256", "Tag": [ { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727789925, "uuid": "f58607fd-2898-4771-bffa-7add60779923", "value": "T1D511558C84A63E5870B1CCCDE2B38C06BE04957E5D991A40BF4D94BB9BAE504B055B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727789925, "uuid": "5740cfbb-600a-450a-bf62-82102b8cbd91", "value": "12:7XOTtvmZPuXOpqXYcGFyZow4+D+wwgEiJbmVLHe6oET3VLHe6oNK/VLHe6o3:Twv53GFyZouGb+KZ+zA+t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727789925, "uuid": "d30ffc43-33e9-4512-990b-3269584c0cf1", "value": 925, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727789925, "uuid": "b073425a-0dc2-46d8-814a-58788cd6dbac", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c3f0234-7ffe-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727791457, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727791457, "uuid": "36f9a6f0-c017-4e8c-adaa-b6d8314b4161", "comment": "Malware payload", "value": "3e071018af5de73a07ba4463b32c2311", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727791457, "uuid": "80df1c98-7617-4594-b90c-0e76f54bfad5", "comment": "Malware payload", "value": "916b12416b893b21f3475f569161c205b401a66c7d0a6cd5c382e375c7a0c826", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727791457, "uuid": "e8f7a107-9e9b-47e1-93e4-22c9598108e3", "value": "T17FF0E17221504622C2F126BCAF424A9C1275C21F50238204468DA9CAB437F28573B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727791457, "uuid": "616cf072-ec6d-452f-881f-1ad654e174ba", "value": "12:Qmo8RsMWrWdAb5DAC6MMmyXfrpz8LBtP6xh/Rgq+VjMx:QmBRBAmWwDpmnP67ZAVQx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727791457, "uuid": "87ff9a87-6d1b-4ab6-b034-e41ec06cec22", "value": 566, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727791457, "uuid": "fa77cc31-e551-4274-9c26-488d8a3c66a9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54d4479e-7ffe-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1727791579, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727791579, "uuid": "2209b12d-82f1-4986-acc1-6c6c955d6740", "comment": "Malware payload (GCleaner)", "value": "fa7a1c8f380073a54282948c07ce6371", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727791579, "uuid": "612a307c-bb8f-4362-88d9-92df908ee4d6", "comment": "Malware payload (GCleaner)", "value": "335267cc6afe06af0dfbdd98f96efc9eaeb10308a4757854aa9df8aa2ad7a450", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727791579, "uuid": "d0dde17b-3580-431f-b493-df4946d4ebfa", "value": "T11594AF1392F1BC62E7224732CE3EC2E4766EF5629E19377A23586E2F1870572D2637", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727791579, "uuid": "ce5b06a8-6936-4661-bbe0-db65625f5f95", "value": "a55335045a16efd5980fa6c3c3fa01fe", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727791579, "uuid": "0c5eda1a-134d-4914-a149-82b1901597ca", "value": "6144:zDzsTHQKlc93Rk7Pw8wwPdFYp4vwqgorKSaR4VRPGIqlyqkZ4/TY:zn6HHc9+w87PdFYgfoR4VNGbyqhr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727791579, "uuid": "d3c848d9-1e4f-4f4c-8664-ad770bfdaec2", "value": 429056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727791579, "uuid": "278abb69-9c6e-4b28-8214-2fcb154ffbdb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7804091-7fff-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727792174, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727792174, "uuid": "ec2f5ae3-3e21-4f80-b64c-37f630dceca4", "comment": "Malware payload", "value": "15532854ef385bdc87798567b0d85c44", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727792174, "uuid": "54b1e1b1-6221-4507-ac80-df3a70492c79", "comment": "Malware payload", "value": "97bf18447eddd455677a0a39b157e11d402c83ebaf83542d615c71fc30e07aac", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727792174, "uuid": "11586442-e3e5-40da-a2c3-a870f26584a6", "value": "T151F0ACB29E527601C2B821A64B4720D43A1EAF6E023A722746CC82C448307387E810", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727792174, "uuid": "e1ed3908-c062-4161-b026-e4ab1e0ecdb8", "value": "12:DVJmo8dUYWHJs9WUTJuASV10XL9qDXGEULBNFrRX7tne98I+q+VjMrIxVZ:HmBdUpVaJp+CZsnULHnXa8I+VQriVZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727792174, "uuid": "19a656e0-1950-40ae-a4df-0868b6cd31f2", "value": 573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727792174, "uuid": "7d06f36f-80ff-4cf6-be5b-74354dcd4a3d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ef07fff-8001-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1727792884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727792884, "uuid": "76f488d1-f873-4fc4-ba67-45a79a68037b", "comment": "Malware payload (Socks5Systemz)", "value": "d3e882902cafff9f38d6681f5b49fde4", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727792884, "uuid": "f52cb6f5-ed83-49c7-a22b-04e81e48b805", "comment": "Malware payload (Socks5Systemz)", "value": "a7562ed5bede0cf86516eb5cdef4a169a79865e1c70f15740ab2d0a74ad5290a", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727792884, "uuid": "1fba8dd2-5b79-4425-8920-0cb6c697b2c2", "value": "T16196331DC97883F2C0504F746E145346B6A3944795B2B8C8E276D9B6AF6FB4A0CCB7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727792884, "uuid": "9c797faf-8df2-4116-9d10-73d0c41b037b", "value": "80417b621299e3e1de617305557a3c68", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727792884, "uuid": "d8b13a66-e3be-4a1a-a86b-fd238ca9e403", "value": "196608:i1sG8jX3p1vWrqdQtIbAcon6Rwkx/C23ma1hben+A0Eg4r0vk6:i1SX3IqdGn6RJZPv/QgOsN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727792884, "uuid": "c283e945-08b6-4fc2-870e-7d4c1bde5bd9", "value": 8779640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727792884, "uuid": "2f8be329-707a-4112-aa44-74e21e73a68c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d678625e-8002-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1727793514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727793514, "uuid": "acc6e386-f043-44be-8c7b-ee0e9194f522", "comment": "Malware payload (Socks5Systemz)", "value": "563c8a27a5e2bb13adf32cc01a908041", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727793514, "uuid": "cc33b131-6163-4596-9581-3019e9b8c962", "comment": "Malware payload (Socks5Systemz)", "value": "c5e834c656d9e6689dafd63cf4c2225d1305d5698d9fdc896247b78e0a514ca4", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727793514, "uuid": "8f2ef0cd-c1f3-44ad-aa29-9906bbc7d118", "value": "T1DF86337C6AD85D7AC4F4C732D8D1F3AC52B6BE247D186AE22498159FD24BC903FA42", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727793514, "uuid": "b091ab90-cbb4-4d2d-895a-df7333621a90", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727793514, "uuid": "00c0a84b-2166-4b56-9a62-3ca24a485a8d", "value": "196608:st6YzfnCRrwzWLst8pxgNLbrJ1LDcjAMTKwFROPb998:snfCRXIIULPhkKwzOR98", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727793514, "uuid": "c4bfd45e-0ba8-408a-9cff-9d67c033e64d", "value": 8498369, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727793514, "uuid": "bade2b94-6ef5-459f-9e6c-a273979e137c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c7d7a79-8004-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1727794034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727794034, "uuid": "fc11955a-0855-4eb2-9e8f-7151f96083b0", "comment": "Malware payload (Socks5Systemz)", "value": "bc59b8ce236b2e24f76bd0652f9e41a5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727794034, "uuid": "e9d7dcc4-38fe-4602-95f4-248ba2cbc1bb", "comment": "Malware payload (Socks5Systemz)", "value": "4af46855b87a13dc5de81bf0455ce35cf3d5e5d9a2da9a55337ad84d57c60e4c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727794034, "uuid": "d48ae921-1b29-4df9-acae-6a40d3736aa0", "value": "T16186335F11189DE4F6A2AFBCAE25D16A82F3FDC98D84801720EFE8595DD134C770DA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727794034, "uuid": "c230d2f9-2515-484f-a12f-b4088cfbd55d", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727794034, "uuid": "e67f40d1-6cfc-4254-a5b9-85ac75cebf23", "value": "196608:iOvLfdkfCSCp1lFuJTX4PIrREl6qrcdugUoTeKoftZxLLXtA7CCcWT9QZT:i2LmCpHF24qEl6qQhTeKo1ZtLddT6QZT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727794034, "uuid": "e6120703-a0e7-4052-95b2-6fd49d7ed4dd", "value": 8511737, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727794034, "uuid": "8e739b4a-1737-462b-b15f-bda4ebd42e9d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76a321fd-8005-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727794642, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727794642, "uuid": "c0461b62-a2e2-406e-ac88-6998d9f2bdbc", "comment": "Malware payload", "value": "5d69ba0270909135492a170a6905ef2c", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727794642, "uuid": "be47d059-75a3-4fd5-8d67-1dcff572a576", "comment": "Malware payload", "value": "8ab2f0a0b0c9cf600e2360253a39834a6e64e77dc5031f7f3e42b89b02631649", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727794642, "uuid": "0911ec59-e945-431d-80d1-3801236e156e", "value": "T1DA37FFD2CCC46D08CD35523B8BA38FF68365D0A6E7A1C8379EE5501999EB74FE6272", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727794642, "uuid": "b7d5fd19-cad5-4113-bdb7-d89a9de3b18b", "value": "393216:67I6fE17oiKIDbxnCq260WkaMyG+x+OXMf/S8CLxljWEEt9ybGrmhrR1MCwgJ:ofE53KOCqgWJzxd8fa8qlWEEtEbGrTm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727794642, "uuid": "fb744f07-4f38-4c24-a29b-20517cdabe68", "value": 23323811, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727794642, "uuid": "0c730b14-3ea3-4d94-8c1f-c27cd305e53d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38da73b7-800d-11ef-afe5-82aee05be84a", "comment": "Malware payload (MarsStealer)", "timestamp": 1727797974, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727797974, "uuid": "2c31f0cf-6dc2-4839-9cd2-4a5cb94db6f1", "comment": "Malware payload (MarsStealer)", "value": "d77353cbaa10bf7fcd96c007ff5f18c2", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727797974, "uuid": "2b71645f-02e9-4825-bebe-f8b581f93a8b", "comment": "Malware payload (MarsStealer)", "value": "42db72d6b807b26c29714f59e923ec09468e21d863005949bcba35ca7c970b20", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727797974, "uuid": "cf39f0cd-f49b-4774-a099-b10b778e722e", "value": "T1118533BF5CAB0921F970C9B62D2EB72A37E235521573F4B8A439B1FE441712382B58", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727797974, "uuid": "1336a89a-44eb-4598-bd34-69ff2c2bd904", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727797974, "uuid": "b39b3b95-874a-491a-b2e6-e17342cf3ffc", "value": "49152:I34zGaaZcPWkMUm7IPTc5OmAEx7ng0XOKDcr/H:NzFWUWkMUm7YwDMKDcLH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727797974, "uuid": "dcf9f7eb-4f31-4471-b308-6ca296e1b650", "value": 1867776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727797974, "uuid": "a84311dc-4a59-4778-8c81-5f16b976a382", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f21e2a19-800d-11ef-afe5-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1727798285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727798285, "uuid": "4abb5c84-da99-45d6-a466-16e57bde335d", "comment": "Malware payload (Vidar)", "value": "237af39f8b579aad0205f6174bb96239", "object_relation": "md5", "Tag": [ { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727798285, "uuid": "0d999adb-652f-44fc-8ab4-6f214e1335c1", "comment": "Malware payload (Vidar)", "value": "836ce1411f26919f8fb95548d03c2f4dfd658fc525dfe21c7be8ed65f81a5957", "object_relation": "sha256", "Tag": [ { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727798285, "uuid": "36782606-1e7c-4608-a3fc-348f48b2e516", "value": "T19694237B87156A1FD8CE82353DD20A132CB6B2A413C460F9528AC6A7A7CC7177B742", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727798285, "uuid": "0fdff0d0-30eb-4686-85cd-8425fd124ded", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727798285, "uuid": "d0e235a1-5f30-424f-bca9-de842882684f", "value": "12288:hQq9JI/vWhNOAE2wMUZ0iR4HHW02AEPzYhDU9qcEO:5JXfOATt3202AHhD5ct", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727798285, "uuid": "2d371627-3887-41be-9302-6036e2c5e2a1", "value": 423840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727798285, "uuid": "f52f279c-937a-4db0-b07e-d2149f5b62b0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "159020a9-800e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727798345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727798345, "uuid": "02a803d1-42ed-4845-801f-59428d1fb792", "comment": "Malware payload", "value": "c7e7cfc3ed17aef6c67c265389593ee3", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727798345, "uuid": "0e16f441-b0ac-4be0-9dce-5da66ba9c253", "comment": "Malware payload", "value": "0ddebb36beb37631df17f68a14c90519f93ba7c200c62003527273119442e1ff", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727798345, "uuid": "7748876d-ec10-4806-8167-a16c037fb28c", "value": "T1BB84239B0065944AF2DB4D73BCE0E634FB256BFA798106D3B05BE1E69709331385C2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727798345, "uuid": "ed13ae56-86b8-49a1-a478-4a52704efea2", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727798345, "uuid": "eb8dff87-804d-4052-94a2-902ba3c43a63", "value": "6144:7RNcX3Y/L03IZz1t0oQqXl8uRa2rIfpympCmd75n3L2BdEtD+gEO:7RNcXoIYZz1t0IDr2y9md75bAy1rEO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727798345, "uuid": "c048eec0-e1f1-4c6f-a496-e79322790b28", "value": 391072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727798345, "uuid": "b5d1b7dc-5b83-49b2-9528-e40b4ade0f1f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57f7170a-8011-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727799745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727799745, "uuid": "e19cef03-c749-49bf-a125-bb8e3e771dd0", "comment": "Malware payload", "value": "c47c1cc87523550c7fcc2db5be18acf5", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727799745, "uuid": "598f973d-95bf-4525-8ceb-3f4fe0f73a23", "comment": "Malware payload", "value": "5aa31432869d5e743f60fc1d5c45ace961928c3abd4e7f7ef666f4c650d9dec5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727799745, "uuid": "5b434f15-f53b-4289-815f-ec3e4c3ac592", "value": "T17276CFDAD1AE44D39C053FC998242ACB5B2847324A7400583A6F7D8A5F774FEC05EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727799745, "uuid": "2d46b93a-089c-416a-80cd-346369d9fd90", "value": "24576:zx4q73f+pIfzfpSlu9GoHM8ZTCqHigPBEyFMA2Zfp9/Nnlg9if3cLbrT7Q5v9mL2:w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727799745, "uuid": "75966184-87e3-4eb9-81e4-b3b6a3e6f6dc", "value": 7345139, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727799745, "uuid": "4b0273b8-6a7e-4dfd-97aa-8285d97092f0", "value": "application/json", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee4aef68-8011-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1727799997, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727799997, "uuid": "37bbb358-e7aa-49e0-8bba-6416203e06e4", "comment": "Malware payload (GCleaner)", "value": "9e4ca222b2961cf65ceeea36e25e2a75", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727799997, "uuid": "18387b59-fad6-42ab-a9d3-464ca60c0b2c", "comment": "Malware payload (GCleaner)", "value": "d4da4cde6afac86376f2ab3911dd1d306dfd4f31864c9daf7d78d1ba086ec269", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727799997, "uuid": "8c3bf1f9-d81a-400b-a47b-5ecf62af69f0", "value": "T1CF949F2392E5BC61E6624772CE2EC2F47B1EF9518E19375B23546E2F24B03B2D2767", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727799997, "uuid": "7ed60a9c-7764-4294-8933-51ef53a21592", "value": "848f132e98f89672fca69a962a28b37a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727799997, "uuid": "f13da722-082c-43f0-bb2e-ee5cdd689c69", "value": "6144:7vmxml96sb7F7fO6agAkH0FXVuAZjfx2BeFO3V9rJt524T:7v+m6UF7fOLVkUdXUBeFIVnt52o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727799997, "uuid": "92c2ed93-60b5-47ee-8768-8d433eee603d", "value": 427520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727799997, "uuid": "032244f3-4150-4e28-8b12-000109e12fc9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f821bfe3-8012-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727800443, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800443, "uuid": "25b835da-63a1-4892-af9a-b5971a29bc8a", "comment": "Malware payload", "value": "d3bbc5f7a65b9c16620056763bfffc1c", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800443, "uuid": "fea8a04c-1241-4f3b-9ec0-d9cda8e6ccad", "comment": "Malware payload", "value": "f2efe100cffdb7dd07d9870be8c3d7631d3474ce23f81b564bc6e40fa852af33", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800443, "uuid": "60058ab2-a45a-48cc-9837-73088cd7d08f", "value": "T1AFA4236305F88C85C64E807C14FDD6F24B3A9DE23879B5EF82BE916015DB137B924B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800443, "uuid": "120db8af-4f35-4ee8-a8af-459b7da5925f", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800443, "uuid": "f3b44e6b-d6d5-4224-80b4-d3f4f57e0b27", "value": "12288:s7vTXlgc1DEFAknOK7b0aR+TYdyZLvPf84BATEN1izTHTQ:O7n9JknOSb03NbXvB+EN2THk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727800443, "uuid": "6da8521c-48ed-4da6-8e94-2362b1bb2445", "value": 470904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800443, "uuid": "c4769814-9041-43ac-8be2-4d8a026e020d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64876a79-8013-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727800625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800625, "uuid": "80a23499-2173-4b95-a7bb-635b53ee13d8", "comment": "Malware payload", "value": "2c529b63d062246e188698bf3cf19d5f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800625, "uuid": "95386db4-0fea-412b-a823-b9ae9bd474ab", "comment": "Malware payload", "value": "b356daf9a749d4fd518136bfecac65c3ca8df32ee96048fda1746a663fa78663", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800625, "uuid": "6cd1d4c7-aac0-40d6-b8f6-849c8101c3cf", "value": "T117042945EA404B13C0D627B9F6DF42453333AB9497EB73069528AFB43F8679E4F22A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800625, "uuid": "d3bf7a9a-e8cd-4815-b799-6b99605c3d8d", "value": "3072:OzeSvtfk84oALv2eEQakGzORuGMzw99LVd38YhTfYo+M/RM+FDhdLn:2eSvJGoA7TEQakGzORuBGLVd38+x+M/z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727800625, "uuid": "29d03345-e3c6-4f6a-bd6e-910daa7a3668", "value": 181466, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800625, "uuid": "177e4baf-fa30-4859-9b2b-2686f934922a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "649587d2-8013-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727800625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800625, "uuid": "88483005-f425-4c26-8e8d-903925d8bb06", "comment": "Malware payload", "value": "398acdae58b71b34287e690c4f1b0c78", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800625, "uuid": "ba3ce2d6-053b-49c5-a3dc-e06b34bba7ac", "comment": "Malware payload", "value": "cfdc75a67e853a4a81424ed34090b4a4de54f63ed6b55c9dd8711cae1f5db55d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800625, "uuid": "5b9e7dab-e1df-4f60-99b0-376e2acd1a73", "value": "T1D2042945EA404B13C0D627B9F6DF42453333AB9497EB73069528ABB43F8679E4F22A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800625, "uuid": "e88326a6-77e2-411d-9532-fb91727622e4", "value": "3072:OLe6vh1ZQIvuCeeuaMuTuRez43IVILQZQy38YhTfYo+M/RgDlplLn:ee6vhEIv1ruaMuTuReErLQ738+x+M/Ro", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727800625, "uuid": "deb2e826-ea13-4e63-8337-befd7bec918e", "value": 181474, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800625, "uuid": "61ca7e12-24f5-4558-bb42-df720a8ff0c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65621e3d-8013-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727800626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800626, "uuid": "d2d522bd-f725-42ad-8ed7-ac488c91bb5a", "comment": "Malware payload", "value": "c0c4f0ca217e47da63a60c7f738180e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800626, "uuid": "41536f08-2d18-4477-ba81-b7fe61225bd4", "comment": "Malware payload", "value": "0c4e5d22bce301889687ffc7b53f10068498372e74c9a279d460956fb0253589", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800626, "uuid": "5ae1b7b0-41f4-4d26-9fa1-2ef1c42ec64c", "value": "T12C042945EA404B13C0D627BAF6DF42453333AB9493EB73069528AFB43F8679E4F12A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800626, "uuid": "2aab11ef-a82f-47fa-9d50-d4fdeabcea8e", "value": "3072:OzeSvtfp84oALv2eEQakGzORuGMzw99Lmd38YhTfYo+M/RM+FDhdLn:2eSvJZoA7TEQakGzORuBGLmd38+x+M/z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727800626, "uuid": "e8b44e2c-195e-424f-9322-351e091f5cc5", "value": 181466, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800626, "uuid": "5875b762-d72b-4045-ba32-e0c181b29923", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "657087e0-8013-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727800626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800626, "uuid": "22f9ad52-f897-4f6b-b029-a5c428d225ab", "comment": "Malware payload", "value": "e75d4ad7ec4014ee3a88840a491d3a3c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800626, "uuid": "593c099e-c9ff-4672-b2a2-838293a39213", "comment": "Malware payload", "value": "9a213cca64cc51ca4e9b58f3774e9178b81ac164eeb9979bdc8954b1989a42ad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800626, "uuid": "88465c8e-7795-4110-afb1-119ee97e3ef2", "value": "T16A142A46EA408B13C0D727BAF69F42453333A79497EB73069524ABB43F8679E4F236", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800626, "uuid": "c872421b-6f22-4baa-82d2-44b55b0a76d9", "value": "6144:mGTwQrAZZacFDJ0MWTY+KRYTXLBWM/RapRF:mGvrA3acFDJ0MGV3/BP/gF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727800626, "uuid": "417ab3e3-4200-4585-b28a-e6afc3681c33", "value": 206042, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800626, "uuid": "9500df86-38da-4b1e-872c-b0393ae2e7de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76b72694-8013-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1727800655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800655, "uuid": "a23657d4-1251-4dc1-9efd-c6f35f78fdaf", "comment": "Malware payload (Stealc)", "value": "c23e2abb156c3e5eb9737f50d36a00ad", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800655, "uuid": "941c8d32-429d-48c9-9b9a-8bc3fc2962ea", "comment": "Malware payload (Stealc)", "value": "8457af481de5569f9b7873b75fbb4abf4f1c7ff5c327aa6a89e8a05296daefd3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800655, "uuid": "1fd66838-73a8-4640-8bcc-6fbe9368d68e", "value": "T1A4849F6392E17C50E5A28B31CE2FC6F87B1EFD604E55376A125A9A2F14B03B2C2677", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800655, "uuid": "27de78d0-c598-494b-a767-39514b954bf5", "value": "a7e371b6d6c51e488e76b49b4da8ffa9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800655, "uuid": "c1039ee1-64e3-4628-8d0e-7476fd0dafff", "value": "6144:3N5aJ3wTX5PbUP/D9j+L4udt7jRZHEbRV9pZqcVQaymU12:AgtPbUP9U4udJNZHEVVjZ4a9X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727800655, "uuid": "9a8d1414-64de-4a6c-b5ee-7a660efd928e", "value": 396800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800655, "uuid": "a54e82cc-c59f-4e72-8f5b-e240dd4fa69c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cdc48624-8013-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1727800801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800801, "uuid": "d4566011-fd38-4008-b670-031dfad12a23", "comment": "Malware payload (GCleaner)", "value": "5e07fcb4ccb125151f762bb283d8d1a6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800801, "uuid": "8129954a-57d2-4884-994d-f4602bb3a6b6", "comment": "Malware payload (GCleaner)", "value": "a98dbef9e19f1f63e51f07cadad64764494792b988b9bea05604f37c85665439", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800801, "uuid": "a7ab80f3-6177-4bb9-91f0-cb2dbc707318", "value": "T1A5949F6352E1BC61E5264631CE2EC7F87B2EBD51CE15375B22D8AE2F24702B2D2677", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800801, "uuid": "f00c306b-71af-4573-8a13-311f2c7862e2", "value": "848f132e98f89672fca69a962a28b37a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800801, "uuid": "90344772-29ab-49a9-bed2-67572919f008", "value": "6144:3zS0ElKZ0eUD9g5vf/QgfdEdkAGNeR47DA0EB3Rov4T:3zSNKZvum5v7UFGNjiB3R0o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727800801, "uuid": "309bad01-cdb3-4596-bc58-3256c0622577", "value": 427520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800801, "uuid": "b948a278-4d65-4055-8d02-001b0f2eec68", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d38f4d1-8016-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727802008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727802008, "uuid": "00ef70c6-55f2-4ac4-b98f-314774542150", "comment": "Malware payload", "value": "ad4adeb05255dd754bf660e462f16699", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727802008, "uuid": "295ee6b3-0c76-4732-aebd-8186c9e4c5c6", "comment": "Malware payload", "value": "77f097b9d66fbc73a0b20169c59432c43035c676357b586280d7dc7b97c8ed90", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727802008, "uuid": "c4baec9d-79f3-4abc-8b95-63a0e7a6e5a2", "value": "T19EF0DD88978B50772CE50C3DF0FBE008E351C02504275163BC6D143EBB96D48F6208", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727802008, "uuid": "f6e2b3cf-1e10-4354-88d7-9842094fa06c", "value": "12:VUH2Wz/OC3cLjJOBUWiWbW745HbISBkTqBouOBLT:Ax60cL65E4574a+BH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727802008, "uuid": "0b066a47-820f-4d16-abe4-dd7eef5e8a2c", "value": 639, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727802008, "uuid": "506fce93-6d74-4f6f-b8cb-7d02397fb0c6", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f30e390-65d6-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1727803445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727803445, "uuid": "7e2bb575-23b8-4f23-a285-357fdd0a329a", "comment": "Malware payload", "value": "f11736f4b142092efe734f10f8e264e8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727803445, "uuid": "87e34deb-fe85-4f66-b5da-2453fb71418c", "comment": "Malware payload", "value": "9f43f0e38d0a0805820eda834e01a30c32050d44b4d8a95031d87bd1c90a3c73", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727803445, "uuid": "4a2c0850-3900-4dae-822e-1fc75a013988", "value": "T182E32B56EA418B13C0D61779B6DF42453323ABA493DB73069928BFB43F8279F4E239", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727803445, "uuid": "73217899-471b-4a7c-88a4-ff662b16f3fd", "value": "3072:mJLce5p0Vd8SkaCHbz4N3ZTJ1NYQ1FGYmXMk/M/9nNkY:mJLcjvkaCHbz4NJTJ3HGnXMcM/9NkY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727803445, "uuid": "7f431238-8dc0-4ba5-a93e-6a2b1977c20d", "value": 150594, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727803445, "uuid": "0d23e7f0-c083-459c-9362-48dcb7c9e0fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727803445, "uuid": "a1f461bb-b7a0-41cf-ba49-f5aa116db722", "value": "t15c2131705336a115aea1cc64dcee87f2111996232744af73ee36c0cc68060cae52bc", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81987c22-801b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727804109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804109, "uuid": "082f78ce-2060-4d29-aca7-96882eb1e060", "comment": "Malware payload", "value": "643a87e1ab2996a42a5a0dc7798c8736", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804109, "uuid": "ceacce85-db1c-4a93-86e5-15158deda2a3", "comment": "Malware payload", "value": "2d7e94cbec9ee5de509457e781b3be1b930086097c429b20dad3a7ba8617e5c0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804109, "uuid": "d2561443-570e-45d9-9e6b-b2400a735366", "value": "T19E634BC0B583D9F1DC16067430A7FF339E36F0F6622AE98BD3E46963AC4664194079", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804109, "uuid": "9cdf41ab-f522-497e-bf1d-baa9323d2a29", "value": "1536:HafAEdoRs3D25y5uScmhYr/pNeITYNRZYw4g5ORCFYVX0ije:HeWs3D25y5Tcmhq/p4ITYNZ/9FU/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727804109, "uuid": "e2529d9b-581b-450e-bb3a-e4ca4172e5a5", "value": 70416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804109, "uuid": "31be4440-6625-450f-8e92-a19f3fda4bf9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "819d1066-801b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727804109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804109, "uuid": "310a5b71-f06c-45da-9914-d6f21ac52e3f", "comment": "Malware payload", "value": "c3b1573c0b0ee0223d9e2c5ef01a146b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804109, "uuid": "11366bb1-b272-47a9-af9e-773b8da51cff", "comment": "Malware payload", "value": "fa167f4da990f75d996347d2a1175aca9f26e778d665abcb661475908d125485", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804109, "uuid": "e0a8d14e-67e5-49dc-a037-51ea3025e2ec", "value": "T1F483FA95BC818A15C5D413BAF92E008E331267ECE3DFB2129D205F647BCA92B0E7BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804109, "uuid": "4470e923-8e84-41e1-b64b-bd906c09ed4f", "value": "1536:6on/g5xjCSgnUN/5ePCEmXMIQ0lXyw6P1af4wc85Cv/5LfOcMI1iXTs+3GUhpA:sxmLP3KMI7lCXPMTvGAg+3GUhp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727804109, "uuid": "73187201-7aab-4497-8f37-c4587b0c3490", "value": 87968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804109, "uuid": "6b4b35b4-5dca-421c-81f3-6e442b2e924d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81a3b6bb-801b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727804109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804109, "uuid": "1bdc52e1-b859-4975-b16b-615566fae06f", "comment": "Malware payload", "value": "6dbc2208f191791e9c177e7c9eb095cf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804109, "uuid": "6c9965c7-aa37-4a25-81a0-a0885525270e", "comment": "Malware payload", "value": "c9916d65574b15ce46b0283f241ccf7d05f3e63debff90e5484b5ed660cb7e93", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804109, "uuid": "774aee7b-8f47-496d-82d0-40c28ff1753b", "value": "T19E732991B8829A22C6E0137BF96E45CD372563E8E2DF3217DC252F6477CA41F0D67A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804109, "uuid": "35b808be-93a6-47ca-b663-525d258e226e", "value": "1536:Z0lXkUBLAtJQ36bwTru4Op18gTxI/g3ahWnU7KpX5qzEF35SBp:qlZOkgS/gqholXh3G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727804109, "uuid": "369b46f8-4c14-4502-8700-a77d447c38d9", "value": 79256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804109, "uuid": "c6206e75-7340-4674-b75f-dd2f530c0272", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81a8195c-801b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727804109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804109, "uuid": "b56a8674-da05-4bc4-9b82-9b7e3b4e31ef", "comment": "Malware payload", "value": "ac84dbcf795f1469fafdca58dcfb484d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804109, "uuid": "7881f3f0-f325-4f8a-940d-dfcc4149a905", "comment": "Malware payload", "value": "9c27a53e7222fe42954f5ac7ab484e01b44a8916c53c117f259029a61b91195e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804109, "uuid": "0947256b-94dc-435c-8d00-29b7531b4ff1", "value": "T153A3A41E7E258F7CF799823547BB8E22964833C626E1D541E19CEA015EB034E781FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804109, "uuid": "16049867-792d-4c8a-89f3-0ffdf81dc966", "value": "1536:U9aImucT6Wv4ZgarBYBo8ynC0xyIGuui0fhJ4lzHWyZ2fG2lQzN:zuWbv+zY7ynxyI7ujJ4lzHWyZ2+RzN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727804109, "uuid": "efb48084-9e00-434e-bcbc-cbf5073c02fd", "value": 97824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804109, "uuid": "a43ab1f7-3cc5-480a-ae31-9d1d2527660b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81ade3ad-801b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727804109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804109, "uuid": "d10b4e61-81da-4236-ab69-f437477045bd", "comment": "Malware payload", "value": "64a71e1cb392b028cfaa82d7891186b9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804109, "uuid": "f6809bd5-c6c0-44c1-9bf2-22336c51404f", "comment": "Malware payload", "value": "745faf12257f6e8a35de627965d016f88d1ba07471390a1adb266c2bf931a52b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804109, "uuid": "34ce5471-ff5b-47b0-9706-b9c4a9b1f7b3", "value": "T18A734B36B9792A26C0C0647E11FB4B59B6E127CE26E8C61E7D720E4EFF116506413E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804109, "uuid": "67c57e03-3851-4949-ab15-29be0c443488", "value": "1536:3NN+9soAvwq9fpwxXSaeWT/uK4l90mIF/wz4:d4EaJzal0FH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727804109, "uuid": "34f78202-9087-4781-8e52-a5fa9411d457", "value": 80320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804109, "uuid": "2baafaa0-7e3f-4bdb-b772-8d8cec63313a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81b15232-801b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727804110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804110, "uuid": "e8317a78-551d-4e3e-bb33-228e5a32953a", "comment": "Malware payload", "value": "06527d11fe6c7453ca2f068c04aac634", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804110, "uuid": "1bb64ad1-3622-42dd-b54f-415d8fded91f", "comment": "Malware payload", "value": "f8161d51ac88196622789e2326a117cdae77faf4fc7343be23b4fa5d53294b63", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804110, "uuid": "6ea99fda-9d85-417f-a7de-9efb4f2a7476", "value": "T12D43E651BC825A2AC2E053BAF9AE558D332177E8D1EB3227CC611B107BDA45F1D63F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804110, "uuid": "365aa49a-e5b4-4785-8b6a-cc10e627ee8e", "value": "1536:xnZoe9GT0GVt6+3LNt9jozoRoBuEqgAxMoh+fAfss:xnCFdoIRNxFhYK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727804110, "uuid": "d8717b1c-d647-4e64-ba97-3b7708b5ca60", "value": 59296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804110, "uuid": "819d84ba-af96-443d-b6cc-bb4bddc501a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81b808db-801b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727804110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804110, "uuid": "c7146111-788f-4e84-8566-d9b57963e860", "comment": "Malware payload", "value": "11247718ca8c63e078702ea88ef8982b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804110, "uuid": "9be342d7-330d-45ce-a00e-3b2f5837318a", "comment": "Malware payload", "value": "0feef87b692b387bc403b690220cd40a3c16ce206f6d91d3ecd0db6b0b86789b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804110, "uuid": "f8e80bc0-c046-4a4e-871d-98aac6fdfd5c", "value": "T1F9639E25E00A9DA0C08A4A34A0E5CE380F23BDC596571EB69EC145F65847DFCF619F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804110, "uuid": "9d4be490-06ba-4ad1-a7c4-977ee1d7031e", "value": "1536:HawBZp2qQAbjwt2RygkJ/lxB/NsB8SNb0/jhCp4:Htp2qQAXrk3lSC/jh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727804110, "uuid": "1cc5c282-a29b-489d-b7de-73b6f9182d69", "value": 70744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804110, "uuid": "88304d48-2b6e-4171-85a2-f5b2d7e23aaf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81b94f2a-801b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727804110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804110, "uuid": "a09ee4c2-f0c8-4519-9ed7-8225d5aacbe6", "comment": "Malware payload", "value": "30333425b38e9edc03e6c688cfca91e3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804110, "uuid": "f6d66e5a-989f-4083-9874-49c621f5a3b1", "comment": "Malware payload", "value": "346b1a5f0a13f29fc00b9f666c6c023ebb8cb7d866dd6842e7187ed0a63ae290", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804110, "uuid": "cd2fc6e2-bd2e-4182-b966-1b9261b07189", "value": "T1A7E35C46FA818B13C4D517BABAAF01493332A79493DB730689285FB43FC6B5F0E679", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804110, "uuid": "5332fdf8-74f4-4eb3-b604-0a118d475d49", "value": "3072:iUblfs+JeHxwamJiBUdKwH5m3m7phtcUfXfMYM/9Wj3We:iURfsCevGKwH5m3mdhlXfLM/9GWe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727804110, "uuid": "ac8ead34-b317-4702-b0ca-05c4282ed6f0", "value": 153787, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804110, "uuid": "801072aa-a102-4f1f-b9b2-090116c53b1a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "820426f3-801b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727804110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804110, "uuid": "57b77a0d-6417-4b21-a1b0-0d7fe7b0784a", "comment": "Malware payload", "value": "3e900afcc75d61b8e14567cf81d3c706", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804110, "uuid": "5f1efcde-74f1-40a9-b05f-6db9a6aec07e", "comment": "Malware payload", "value": "b376fd10ad01c9d4b77f50cadc180683a47316f3e3001733c71e230f3cf81662", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804110, "uuid": "9e8d5118-a853-40d0-9234-c4a617b84ca1", "value": "T147733B4271280B47E5930AB42D2F5BE05BBEEDD031E4B684695FDB664A35E3710C6E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804110, "uuid": "b874cc06-251d-4851-a348-c0867db7e00e", "value": "768:k1OpIF986jcY+C0rRixDTAkdlS1ZEeB+uJmHHpPPfSooeaim47pPHiOnrIqrRYN2:hJXJrcUkdM1WeEpp6i7XFY1UIoNt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727804110, "uuid": "2098a550-860b-4512-bd35-c3ede87c9d07", "value": 74848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804110, "uuid": "c67e40df-8209-4083-a2ce-54110c798cb5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a29802ce-801b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727804165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804165, "uuid": "a553394b-c6f9-45c9-998c-31e8af2304a4", "comment": "Malware payload", "value": "40ba48b789eb491e2accb1925f310173", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804165, "uuid": "e8f5aa43-5e14-4cd5-8fe1-f21375b27063", "comment": "Malware payload", "value": "63dbfeaaba72674804bc46a82049438a59a043b4c307965a992a68f8d3b26799", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804165, "uuid": "0492111c-a865-4923-acdc-ccca0419beae", "value": "T1A5733ACDB8024E3CF94BE5B954560E09B924639896C30F1BB7ABFDE36DB21587D02D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804165, "uuid": "b029ffcd-05b2-426c-93ee-002127aa95ec", "value": "1536:n/GELq4qtRNi/piwIr8WhTQ16raqCufZG:n+Ee4KRNCpitrVaj9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727804165, "uuid": "056e28a9-a956-4a00-aa57-b67309d78639", "value": 76428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804165, "uuid": "2e2233e4-abd1-4a36-acaf-045804ace1f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28e710ee-801d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727804820, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804820, "uuid": "ae7e4621-6d46-4acb-9aec-350a59c94679", "comment": "Malware payload", "value": "67a74b903b55c8f76dbee43f52e8b792", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804820, "uuid": "80212de6-b986-4140-b6c5-97fc656f5f1e", "comment": "Malware payload", "value": "6e701fee29587298e88a1bce88b9ed6f2c32e29b0284762a998b6267e0c63f44", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804820, "uuid": "3f51c9d8-9933-46da-b34d-97ee62e9d449", "value": "T1F2B44A25EA9414B5F3FAD538945A8503E27D3C0DC228766A02F022761FF7B778B2B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804820, "uuid": "83d25347-19a1-46e7-bccb-5a6e548b3ede", "value": "b1c5b1beabd90d9fdabd1df0779ea832", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804820, "uuid": "25535b8a-ec0c-48e3-8e21-13a36b94e268", "value": "12288:wyveQB/fTHIGaPkKEYzURNAwbAg6cmAmqb:wuDXTIGaPhEYzUzA0LmAPb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727804820, "uuid": "092ed425-2c4b-4fcc-9f1d-c1324f09350b", "value": 536137, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804820, "uuid": "cf272100-741d-4aab-a8f0-03d0be4fa052", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7471ff01-801d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727804946, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804946, "uuid": "4a2d9d03-b168-4dca-aa2b-4611fec18744", "comment": "Malware payload", "value": "b0fabf18d599af16c9aaeadf0c0db300", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804946, "uuid": "355a2df9-3571-4c41-917d-a4b3a7da9965", "comment": "Malware payload", "value": "fc963004cd95a358aebee8585523bc3c4087b9e8e01f448e63b71496ef963b00", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804946, "uuid": "2bb11f2d-57f2-41da-8278-3b255c22285f", "value": "T1DDA33802D5508B57C1D2177ABB9F426D37332B68979B3321AA247FB82BC279D1E3D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804946, "uuid": "7ca9d19a-03f9-45ff-b6e0-f1afa1f4df90", "value": "3072:iHobm0w+aSP+wMsGZmDYgTE+mBQO/IXZFW:iHo6+aGMsGJEE+mBQO/OZFW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727804946, "uuid": "74dd0979-ac83-4940-b5b3-7e6614dc2482", "value": 106529, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804946, "uuid": "847b0279-c015-45cb-bd4b-53486b31181a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4b98eca-801d-11ef-afe5-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1727805135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805135, "uuid": "b4d8101c-1799-4079-9f86-f2b3d019e171", "comment": "Malware payload (Smoke Loader)", "value": "b083fbec8a606ff8b2a0a608da7b6ecd", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805135, "uuid": "3f8087be-6651-42ec-93f3-bdb9e102b74c", "comment": "Malware payload (Smoke Loader)", "value": "3b844c4d052c88150a454bf026a251345dd375c0dc397aa8bfd801fbd0f33dfc", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805135, "uuid": "591dffdb-015a-4d9b-b260-ad8301dd30d2", "value": "T1D6849F6352E17C54E5328A31CF1FA6E87B1EF9604E57F76B13189A2F18B02B2C2677", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805135, "uuid": "ccc93cc1-3b52-4692-a15a-867640617792", "value": "a7e371b6d6c51e488e76b49b4da8ffa9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805135, "uuid": "8f6446ad-2fbc-4fe3-9123-d8885a3eb255", "value": "6144:p063PRhNrZPbUVoUH8d2DYQMfTiHggIb90TpyChMD:tjnPbUVZ/YQMf+Ad9eE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727805135, "uuid": "3e34346d-9629-478c-9345-64dbb0c58d47", "value": 397312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805135, "uuid": "4af82b8b-a859-4f9a-bfa9-c7c75f50a904", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c0d9e2d-801e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727805308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "602365fd-0233-4627-8ebe-8db3a40f7a96", "comment": "Malware payload", "value": "e8dfc5a24eb63e7c06755ab686ca8ad1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "e3ab4d31-37ac-4b52-bdad-13a063308ae4", "comment": "Malware payload", "value": "201e0b9560150c8cd3ff28936f5d73221200bae93f540bc1afc1783eadee0b9e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "d4eb25d9-320c-4bc6-acf5-9f39195fe144", "value": "T12EC012501CD62F80C4D8B99D37B207AF30834278161717A8EC955026D44F50BE4191", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "0ba45858-9442-4427-ab7a-57fd763f3725", "value": "3:6XtDoXDnHDjUi6LUckMUaaGBzSEyLTUWZjIMVeu8Ui6LUckVWLI8TBzSE8eU5Hfw:/Xj/MZNIRx8rj/Vo4M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727805308, "uuid": "633ddcbf-21b2-43b5-bc32-192ecd82c2b5", "value": 186, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "c58a6a95-572d-4256-a225-b9091052654b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c0de628-801e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727805308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "02ac892b-9886-4f3c-a5c3-bd563f53cd04", "comment": "Malware payload", "value": "ea4939bc52f8a7f1021ffa6eafaeff1c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "c9c9277e-60e7-4cf9-94df-875d8be97935", "comment": "Malware payload", "value": "43b6d26ab68d7fe0fa16ae1d68feabfdc8ba31d3379ac15310db42228032a70a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "b12d6fdb-22d2-4e09-bd77-34ab816c2d2b", "value": "T110C04CE624D66B00D095BA443577DEFA70D6C6D073408F6DDC971956AC48921F00DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "a7870cef-1e44-41c6-b332-8849d693aec7", "value": "3:LMFbROLUcZMPFGBzOdFLTUWoYVbzKDMFbROLUcZVWQ8BzOdIU9KioA:LMFbVkqQYcDMFbXTJiN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727805308, "uuid": "72b64c7e-367c-4fc8-9423-146b7c9ec204", "value": 144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "353247a1-a170-4327-9a45-107b54cb69fc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c0ff42d-801e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727805308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "ee6f95ad-67a5-4891-a163-b323cfc58c9d", "comment": "Malware payload", "value": "e1647168e5c76715cfe7d89f035791fa", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "25cb5fd8-2d1e-4eab-ac12-21ddb5987a93", "comment": "Malware payload", "value": "b6824518f95ade7b61d6ca05b26512586ef3247fabfb8aeff4212f1436e0fac4", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "64771bbd-2771-44d5-acde-f276afe3c07b", "value": "T189D11F0FBBD9BC77DC9C9439029B4719326FD92696428787530CD8682E4B6D80CF69", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "de7cd600-a9f5-4a57-8417-1a614adad215", "value": "96:Seno1shNtNuEqMDp6cvvO9Y7pkhJTu12P5ifq+7MVgBSNBe58:Sgo+hNtNuDOp6iO9Yu/K6je58", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727805308, "uuid": "c8f78fb8-466c-4899-853a-4c5e13da8071", "value": 6398, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "474818c7-6034-468b-92a4-73149464acdb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c260de3-801e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727805308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "121261e4-ceb2-4f2d-95e0-bd2440885f04", "comment": "Malware payload", "value": "4a4f105206a3e669508ef2502b0be066", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "b56abe17-9ef8-48e4-93d0-da1fd20a7f55", "comment": "Malware payload", "value": "01913505431267bad3456490fab7757b1cb2ff98618d8b6e8ef255f5a7f9ac17", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "22286615-cda9-4104-bd1c-fd9db0b1d4c9", "value": "T18511549AE37410703C1915F8C71A0D79135D843B0339AE27E8BF5C00A9A7828E319E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "a1c08717-4494-4447-8d2c-bc33e3e41581", "value": "24:/4B/4oGdQNAgU+tBvOqKwUZjo/nhm1ARK5qJcyPOEZm1P:/G/adaWpU/W2K4JFUP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727805308, "uuid": "8ac60576-3334-4ada-a0f3-b42d60c1bfce", "value": 970, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "44a7493c-5151-47e2-b723-4db246f6a128", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07b7c55b-686c-11ef-ad0f-82aee05be84a", "comment": "Malware payload", "timestamp": 1727805308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "102aeddd-2453-4470-8d70-bd8a44845977", "comment": "Malware payload", "value": "7aaf8af5230dc3d85b324c1e50ab0585", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "3e68790c-487a-4058-b9a3-f36674135b63", "comment": "Malware payload", "value": "99618a7eb9660d493685a14d752f597e8fb303f12a6bbc9bb52c87f02e55f07a", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "be715bec-72a4-4f7b-9e7a-60568e2373d0", "value": "T11EE026CEC3C49CB8B48344632301C7C212C6F0125AD9FD882FB98D2130D17499686D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "a5818be9-1b0c-490b-821d-ed0a644b9892", "value": "6:nnY184iu3xearB02gTBe8Jtkv+Rj+8p1fjodgKaWp1fjF0:ne84iu3xearB02WBbJtkv0j7ppj3tWpQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727805308, "uuid": "db0d2680-c5be-431d-8fc4-84da5a26de7b", "value": 343, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "7e32a1e4-7cfc-4c2e-99ce-965fca2237df", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c3b3eaf-801e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727805308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "94a2f977-afd5-4f5b-a2ad-2425d715d88b", "comment": "Malware payload", "value": "5ef74e62989589cdd7951ce81cc7d5a0", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "4355136f-88b0-4c37-be23-166b8f637129", "comment": "Malware payload", "value": "6533aa0cd737af543303402b69b93f8d43807ace4514e691a0cdc6790b7be3be", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "12424971-8f08-47c0-9797-014d28f0db96", "value": "T16C41FD0BB3E5F97225C8D0717E969024258C60AB17702D5C714DD6BEBBACDD813B8E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "6c64c086-5f29-44d7-acd3-84f0dc236301", "value": "48:n8lZzkWgjIpjIwm2sjICl1Vd/iAVXksyFcEjIsGpGXV2eIvg:n8l5kWNWwm2xCLx+syFmAj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727805308, "uuid": "54a86099-8936-4356-8878-843d5d6d0901", "value": 2352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "6458d088-cd30-4e38-9544-ff66b77b86cd", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c3c5314-801e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727805308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "5c62f144-3881-4399-b814-a2aaf78fc97e", "comment": "Malware payload", "value": "327a50f726a264a092f07df8f66f0b8c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "4fa9ce93-db39-462a-9f7a-ac1811a8059f", "comment": "Malware payload", "value": "d9984742b3e88e4d241bf23103a3e645aab810f1736801a4680f1addc1c7f1e9", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "6e07393c-0949-4b5a-ae7b-dc281eb404a6", "value": "T17AE01AD930D37B634898CE00B16788E46096CAE42240EE5CE94F2DF97E95F20F11DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "4f39c6eb-4b13-4ebd-8e8a-e6168fa620ae", "value": "6:apWN/aK1WIQWMb5/LdMGRFa0LKit5B7anIUJ:8UaKkKM5dMSc0LKuUJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727805308, "uuid": "2a75d6e3-e8ba-4df8-8869-b561871f7d02", "value": 364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "f30c8659-3418-47a4-928a-6edfbc1b64d2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "952f16ae-644d-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1727805308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "2089220e-fc97-4436-967d-0cdc9b36a8cf", "comment": "Malware payload", "value": "c728c589a1ae9defc491c8d61b41d649", "object_relation": "md5", "Tag": [ { "name": "Cleanlog", "colour": "#6e4d28", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "8af2b44b-33a7-44be-895b-54522882387f", "comment": "Malware payload", "value": "58dbe59f3c201218bc77c2757f4ba66334c8657464dc06ae61354460499722e5", "object_relation": "sha256", "Tag": [ { "name": "Cleanlog", "colour": "#6e4d28", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "5273ea99-2b96-4370-a72f-1d2bc47b41f5", "value": "T1A5D2D75BB6609E39C0C5D3B049DFA1B0727374F4A722620F368AB3717541B889F1E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "da8235c8-2e6a-4df3-8c19-cec1add56208", "value": "384:BWskamFsqGhR9jExKlNUSHNnczUIVA7QvOMy1+VEG48lMdrPFOoCNEVH/gxk1:AFTaLRREUrtHwdOW2gxY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727805308, "uuid": "f5805344-fb67-41b1-b437-832cf576c0f7", "value": 30068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "9c032eaf-ecc0-432d-81a3-8d82f9be9874", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "521bf81b-e423-4093-a03f-9b15993b8ab6", "value": "t1f6b00121eb906524a6b1da0a6a533e48b46a31e5b0756164299f6101b61c64526d30", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c5376a2-801e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727805308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "bda8b8ae-518d-480f-8de1-46eaa325a0dd", "comment": "Malware payload", "value": "cdd473542558c79d3a27bc621535e1de", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "9e66a6d8-c696-4b63-836a-d7a8db7718a3", "comment": "Malware payload", "value": "3f85b345319b2bd6706b351c851e8dc3bc44e19a7399cade21888e807288f81a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "8f3916de-8190-49ca-bb0d-88439b08d896", "value": "T10CE0ECD4B9E337730B4E2D0EA36388ED3492A0AC04239291AC5B906DA574B49F6381", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "90eec74c-f9a8-4bf6-be37-ef8355302264", "value": "6:aSFj/Me1jakFj/McXsoE3cRFj/MMa0LKif:jVR1LV7coOkVra0LKs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727805308, "uuid": "f683d54a-cd94-4d29-9d31-09d7411cafaf", "value": 305, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805308, "uuid": "93b86bb6-9bae-4278-899e-eee89460e80f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c596446-801e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727805309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805309, "uuid": "148803c8-abf1-4d55-a9a3-7176276b9111", "comment": "Malware payload", "value": "eea13d8d161d71740b51b54023c1dda9", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805309, "uuid": "2773273a-9ac7-41d4-a6cf-193c68cc33a7", "comment": "Malware payload", "value": "9865568f8da5faced829f63130c077af4657e763f7143bcf58b8c0dae8d007c6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805309, "uuid": "b93a2edb-ce8e-4a53-8450-e69fe6debf21", "value": "T183C012D855E02C70B2549214436E85E633433E2846678BC73D430026850C788F2357", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805309, "uuid": "69f9c3d0-ddf4-484f-a2c3-2faf8caffa5a", "value": "3:TKH/t4TKK3YXIoTKK3YXI5IqHAjxARft6LUSjUs2TLPChTD7ATLPYbclm0KK3YXU:iK3YXjGK3YXb4ASNtEGTiTD7AT7Y2GKB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727805309, "uuid": "6cc7c7c7-78b8-495a-b5c6-cf9ea6df774a", "value": 172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805309, "uuid": "439507d9-72a1-4853-ae46-b16e7b53b54c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78693922-644c-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1727805309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805309, "uuid": "8c8ec056-b87e-46d2-a3b1-7efa517bacfd", "comment": "Malware payload", "value": "0762baf23fd9da47efa2619b34b0c552", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805309, "uuid": "f0f2cdae-c260-4c29-8be6-96aed2370b99", "comment": "Malware payload", "value": "2435928486ca968ac345ebd544d010d8e9e1b792db6801d0f65c14ecafdd153e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805309, "uuid": "197af04d-bc37-4f58-bb13-df1e94dd219a", "value": "T1AA33F92EA5509B39C1C2E6349EEFA210153160B4FB32272F2A84517A6DD3F58477EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805309, "uuid": "2e7017df-cf28-402c-853b-b1280fb02efc", "value": "768:AFTaLRRTAhgARXKF1+2OGeWum+2OGeWum+2OGJxZBpR5hJxZBpR5hJxZBpR5hJxK:GTqRRTAhgARX0K99G+y2/gOF2NhNm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727805309, "uuid": "85c2f069-8cc5-496b-89d8-fea6c9f62510", "value": 50575, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805309, "uuid": "5399b4fd-94c0-480e-8663-8661dbb72422", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805309, "uuid": "a2430749-ff18-4989-9fc6-e08f04bf7229", "value": "t1f6b00121eb906524a6b1da0a6a533e48b46a31e5b0756164299f6101b61c64526d30", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eea911ef-9031-11ed-9397-82aee05be84a", "comment": "Malware payload", "timestamp": 1727805309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805309, "uuid": "1628d6e3-c672-4780-9e2e-3d9f741576a0", "comment": "Malware payload", "value": "0b73cdccd97f65994412ab0d73d58079", "object_relation": "md5", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rootkit", "colour": "#656659", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805309, "uuid": "4fdf4a9c-4fe6-4e58-b8c9-393ac8663d0a", "comment": "Malware payload", "value": "3f37f1c383dcf32de86f91de1daef3d9a9d630b0ea5e9ee87367d87703426d63", "object_relation": "sha256", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rootkit", "colour": "#656659", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805309, "uuid": "07e0b297-d283-4133-b19c-4fed2bad1af1", "value": "T17D23F1E1E9A601C2DE30C88EE5ED7191EC39D2B0AD94C59D4AD9D9042FD73C6502FC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805309, "uuid": "4f3025da-a68c-4983-8481-fc1131d86f7d", "value": "768:qQBVtKcbGtUVbfZBuWcoImw52jdaQ9HFC+YxZMhWHL6RuSL4km047k:qQEKySAWcsh44lvYxeMzSLZm0d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727805309, "uuid": "644e0541-de9d-47d8-8671-536486edb733", "value": 46332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805309, "uuid": "d2ec1611-3bb4-4752-a5de-c03e48e98816", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08347191-686c-11ef-ad0f-82aee05be84a", "comment": "Malware payload", "timestamp": 1727805309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805309, "uuid": "9399d75a-2a92-43b1-ae03-b07f0a2cfb18", "comment": "Malware payload", "value": "57cab1be32aa02b90317b1555ce96164", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805309, "uuid": "3fa313a8-011d-4fe2-88ba-7483a9543c5c", "comment": "Malware payload", "value": "5829c6029d67cd266ece7ddb52c4fbd581f7ee469d71d7dc4948cedc2956ab23", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805309, "uuid": "ab6345b6-4217-477d-a9ac-c202bb150854", "value": "T19EF081A5566AF579FDC3F236B3D06538484654F60803553B26C1D40BAA69EAD90CCB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805309, "uuid": "3f8cda41-896b-4a56-a26c-83a138f2554d", "value": "12:x1UaAFQEAZAFdEnDbmeuAFpFAFkIwIwAF6VAFLlAVmEByeX:x1UagQbgdSvmxgrgB9wg6VgmVXByK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727805309, "uuid": "f4f04cbe-694e-4d52-be0a-dd8a78f4fe42", "value": 634, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805309, "uuid": "ba7a84e0-6f7a-4752-bc05-f64ea995d19b", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ccf2f57-801e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727805309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805309, "uuid": "ef1ca424-3e02-4603-a196-450ef6fe57e8", "comment": "Malware payload", "value": "410cedde4e265e6550e8fef71491e12d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805309, "uuid": "3d57f1e9-e1df-4ec7-ad30-48500b81c3ed", "comment": "Malware payload", "value": "ac5c39016d6864a78ec1d45a863ce43bf87fa10867c7e0b82fff53472a20f025", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805309, "uuid": "71e40dcd-a69c-4556-8e98-77ff1cf1d62e", "value": "T14BF0497B463429730A866081FD380410B35672E40B867E45F72EED072BF1A80BD8F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805309, "uuid": "cf1bef35-9aea-4da6-90cb-126d01caec49", "value": "12:nHKfF58QkOfgk99P6ZW8d0ZC4166mQkOfZyPk9w:nHKfL8QkOfgk9t6ZBd0ZC416DQkOfZyp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727805309, "uuid": "b6d130bd-cc32-4d39-a180-6d2dfe2d5ecd", "value": 637, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805309, "uuid": "1a2866e6-7c26-433c-bea1-7ff314869910", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08fdfeb1-686c-11ef-ad0f-82aee05be84a", "comment": "Malware payload", "timestamp": 1727805310, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805310, "uuid": "fcc00d13-4739-4293-85d9-2ea7fc48e56d", "comment": "Malware payload", "value": "d0b849cd19813c9ab50e21ef4571ef56", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805310, "uuid": "de26ee02-3958-4b11-8e95-114e454b63e2", "comment": "Malware payload", "value": "26cc4d4d6fae20cb0e62550e2e04d45cedef40cc7d15a829fe83964c19e045de", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805310, "uuid": "897778bc-a756-4296-a586-6da61729692f", "value": "T1F4C10AA5FD24A8603B5E4C3E70AE56296EC33D3F9E3B3804752FE860672D04CA3586", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805310, "uuid": "86695a3c-3d01-4f6b-b805-1abffdcdfb7a", "value": "96:YxzD+tQ4RP/dhdOBH23aTU5UUZQj+pKrHphGVp23acGVJ23av:Y9D+TP1hdOBH23aTMZQjhrnGVp23acGT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727805310, "uuid": "0a826f95-147c-4556-a6e5-e51c4e424b29", "value": 5915, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805310, "uuid": "ad14bee9-878f-44d5-b2b2-47f03fac76bc", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08f72892-686c-11ef-ad0f-82aee05be84a", "comment": "Malware payload", "timestamp": 1727805311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805311, "uuid": "796ff9a2-2e06-49af-be54-1fbf1beb2151", "comment": "Malware payload", "value": "ceef8c19594baeea9ee9b8d403ff758c", "object_relation": "md5", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805311, "uuid": "6b21e95e-5c05-4ad5-a637-98e6b2fc2538", "comment": "Malware payload", "value": "27fa66980fa184a95f9f7c40c874568f339db5229b8a98b2aa9a3202e0a403fc", "object_relation": "sha256", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805311, "uuid": "10d02ff1-bb3a-488c-8e4c-e3eed90e6613", "value": "T1C2014630B50EB24CC5C2D952B951A111D10E175DB00D50F2F4D9FAC1474ABCA65259", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805311, "uuid": "61fb8235-ef6c-4655-a862-6b2f3ac91361", "value": "12:X58jCevqFWSVdrHwclAgcgW7OSqfccYsMEjRy3baBEfmohXcykUyp+tewp68Y6PM:XijR4N7wcl7cZyFTpo+BEfRXKp+qhiM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727805311, "uuid": "b862fc4d-6155-4d11-9add-ff697b62ea60", "value": 802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805311, "uuid": "5c9050b3-7ef7-4d22-ad91-a03ab221b8c7", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07c57857-686c-11ef-ad0f-82aee05be84a", "comment": "Malware payload", "timestamp": 1727805338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805338, "uuid": "695613d0-79a6-4c24-82e2-0fad0670d6d0", "comment": "Malware payload", "value": "a11bdcac0a9a0ce332761d6fc18228c1", "object_relation": "md5", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805338, "uuid": "06fd5f4d-f40c-4bb0-bc15-62a23c57a35b", "comment": "Malware payload", "value": "456390dbd27ccb743a52d7d725a45ee476f8166f2a21b8bc333e96dd276eff64", "object_relation": "sha256", "Tag": [ { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805338, "uuid": "ede4f2a8-910c-4272-8bf0-3807fbcde3bb", "value": "T1C874239F381856F7FA2B4242B9F998A927FF11457B6C46F4C03201E62E962386DD74", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805338, "uuid": "b21c5460-cd8c-434b-9622-d1262e2a63dd", "value": "6144:wvAdv5EI7Q1EywCaT/SI4YF1Gkvb8JCaSkx62Zu8XnLWbRSu5FC4aVHE2E:wvAV5X7Q1vwwDYF0kvIJfL/xnLCSu5FR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727805338, "uuid": "8191ee5e-5c42-4540-bc25-2e1df059cdb8", "value": 346793, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805338, "uuid": "f0535e33-6bad-4486-85eb-d607b696f02c", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c7fd1d8-644c-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1727805373, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805373, "uuid": "9c1234fe-4d13-4a88-9519-ddcb9ca6849a", "comment": "Malware payload", "value": "ecedbc01c09a0c731d2cd4c58074d7f7", "object_relation": "md5", "Tag": [ { "name": "CVE-2016-5195", "colour": "#D8D4DD", "exportable": true, "hide_tag": false }, { "name": "DirtyCow", "colour": "#E3CBBF", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805373, "uuid": "88e938f8-4634-4ec9-8a9e-c6c0b3ca03a7", "comment": "Malware payload", "value": "c433453f93bb28661d0befecfb472cf5a43c6a4be80e7357781a0c1c6c0590da", "object_relation": "sha256", "Tag": [ { "name": "CVE-2016-5195", "colour": "#D8D4DD", "exportable": true, "hide_tag": false }, { "name": "DirtyCow", "colour": "#E3CBBF", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805373, "uuid": "cb4562f5-6fdb-414c-96de-727227180bab", "value": "T1DB6423918DC3889D00A04FC0D9CBC59C3FF839920A8A5E9379F45F45E5FA6D836E43", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805373, "uuid": "d75049d0-6184-4e61-ac4b-7e750a594a62", "value": "6144:CvVFjAOwdx9N48oQ7nM091c1TWVHKQeilTmvJbEwwcntwNKEJu86UQb83Aem:uPUO8xndC0VHQilivVEwwcntwtJunULs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727805373, "uuid": "7676ac8e-1c57-4fad-8295-ac517c49da80", "value": 328918, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805373, "uuid": "a67b3324-62a8-40e0-bb10-eabf58018e91", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a66808bc-644e-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1727805766, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805766, "uuid": "632816ae-9259-4890-a99e-8792d15ccb63", "comment": "Malware payload", "value": "19f6ffe88d96024f2d751565cb72b0f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805766, "uuid": "83cda55e-4879-4638-b472-b0f10a9bd92f", "comment": "Malware payload", "value": "96273e46a800bb8a08195365f8b249215834c07fdce90c0f2571ef8b569ed488", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805766, "uuid": "04cc5eaa-2429-43ac-a353-979e6b5fa891", "value": "T19F369E6BB6F694BDC197C13847ABC2727A31B4A803216D7B3584C5303E66E641F1EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805766, "uuid": "d99bd667-2a59-436b-8427-85d1e5c3ec7d", "value": "98304:a544Y9+TUG0joFB4TJdVpzGiaAC1TfLhxiv:L9pEFBYdbGACNE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727805766, "uuid": "ef02762b-ea7c-43f3-88d7-113480cc0cb6", "value": 5062183, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805766, "uuid": "fe6e67c2-2964-4b23-bc9b-8c7c774553a2", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805766, "uuid": "269fd225-1da5-41dc-9144-23cd89a34480", "value": "t1f6b00121eb906524a6b1da0a6a533e48b46a31e5b0756164299f6101b61c64526d30", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3dcfe71e-8020-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727806143, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727806143, "uuid": "c53fb901-8882-4303-ae0c-10b6681d7f2a", "comment": "Malware payload", "value": "801832b0eb4d855a4753bb1af311db93", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727806143, "uuid": "397696da-bf0b-4725-bbd2-d60ae012441d", "comment": "Malware payload", "value": "4a963dacd8dd63fb79d0ec9c75da079eca9ffb9e4214c716686966434c9aad36", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727806143, "uuid": "7c9937f8-1b79-4ea4-85bf-0fbbcd05d930", "value": "T127B6D033B39B9034D696427032B66F766A787C451A38CE0BB3A4FE5C1A325A1D6753", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727806143, "uuid": "28551512-a3d5-4326-abe6-1b0cc74816ca", "value": "46d8e48c13de471d4398c0067c490431", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727806143, "uuid": "dd0dc333-32f6-4940-a301-f26ca7677dd4", "value": "196608:/72lKkKCAWGgV89oRqt/CdqRc64hv3tmF1b6CffW/sfH6s7zQcKDsVv/JLSF66bI:VWGQFqt/3crv9mF1b6CffW/sfH6s7zQQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727806143, "uuid": "d6fb581b-2b3b-4bc1-849c-8bc9b5ef3787", "value": 11202560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727806143, "uuid": "f0cb03b8-0414-4a0c-aebf-65c18a144fdf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db84af77-8020-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1727806408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727806408, "uuid": "0f53821a-f392-4bed-8b1f-7b3aeb04d422", "comment": "Malware payload (Amadey)", "value": "cc59f16111ee72570823d492435c1a51", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727806408, "uuid": "9418d137-2602-471c-b9f0-3a6c41890c58", "comment": "Malware payload (Amadey)", "value": "20c8a6c206db42980237dfd4a031d8d25a667bbdbafffa718445576d199ca034", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727806408, "uuid": "742dd351-7cfe-479f-8565-3e5888c7539e", "value": "T12485331247CE9015EC15237DDBAE96F0577C0A224AE9425F260084E97B73F0F9DA9B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727806408, "uuid": "449d81ef-fa61-453e-b5ca-bffc1faeda89", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727806408, "uuid": "f3272eb3-43ed-42ce-b23b-a87fb49dabbd", "value": "49152:JWNE+KKIVYbSzwDHCe1g3kgzOcjPibzjr:JsIVmCwDCyg7ycbaT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727806408, "uuid": "5fbac82d-a857-4fa0-9de1-5dbff5a770cd", "value": 1868800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727806408, "uuid": "df9ffe1f-c6f3-4ecf-a31e-aa1f7cf81546", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9eca6e46-8022-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727807165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727807165, "uuid": "0aa2d19b-3446-46fe-8eb5-88ece6b3ccb3", "comment": "Malware payload", "value": "49d6a1e22004f57ea06e477d93b2754b", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727807165, "uuid": "0e984307-85b9-4b79-96cd-21b732d87fcf", "comment": "Malware payload", "value": "64e57feea69e0a81e13c93ae85ba9561b77c00a13a9508092cf1bb23d0e70526", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727807165, "uuid": "1d892654-7a4c-42df-94b4-1cbe6cc41885", "value": "T18C51A5F801100FBAECE98A2973B58168883EC0D5F1E75BD5EB4794325D156A4BD86F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727807165, "uuid": "621e8be7-d001-4d60-ba06-52ee6a23a1ea", "value": "24:AvaRIRS/x7Rrrr4r9rPRZm7Rc1cKc3s5rRvUB8RwJKFRhuj4rRCjUXfROCOjOUOx:AS7x7eY7unlz5oB67ZAEYSNUy7wwgxi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727807165, "uuid": "c93b1cba-becf-417e-9a49-fa5a36089bf2", "value": 2754, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727807165, "uuid": "edd5b783-2ef5-42a4-975e-4fc87a355d8f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20c89312-8023-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727807383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727807383, "uuid": "00756d3c-2332-490f-9c27-2a8206746a61", "comment": "Malware payload", "value": "63de2ce191f46e5c1b921468ac4b211d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727807383, "uuid": "3f3b3cae-1db2-4376-98fe-2e007f6fdeca", "comment": "Malware payload", "value": "7e89eb69321b1a68a18af6d43beb7b8db2b474fa180e2a7060003c92b01a351a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727807383, "uuid": "76297d01-96aa-4e1f-8435-ae06bbf76d71", "value": "T1FD159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727807383, "uuid": "98bfee4c-93f3-4479-938f-95148e52b4a7", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727807383, "uuid": "64605119-a8ef-4858-93ba-7cd432433465", "value": "12288:LqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgaCT4:LqDEvCTbMWu7rQYlBQcBiT6rprG8ai4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727807383, "uuid": "05c3adb6-96d4-4595-82e9-99db33e025e6", "value": 917504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727807383, "uuid": "e397ef94-5452-4611-8442-1dfb922e6bb3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3e76ddc-8023-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727807737, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727807737, "uuid": "d1261f56-d9ac-4c70-976d-9fbf74735f47", "comment": "Malware payload", "value": "464bcb7badcba7e6d046891c7f124732", "object_relation": "md5", "Tag": [ { "name": "csv", "colour": "#56b72e", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727807737, "uuid": "9becba19-60b3-4a4a-bf3d-77e016d359cb", "comment": "Malware payload", "value": "8695e551a00534b96ce8661ca2a5c4e43cef425d24f915273ff634066bc9db18", "object_relation": "sha256", "Tag": [ { "name": "csv", "colour": "#56b72e", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727807737, "uuid": "d40e7235-a987-49e1-a82f-2cd3d02b7cf8", "value": "T13322ADECE36AE60E7114F2A32FE457E07335488FD44B1FC3ED54E5812079BAA52246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727807737, "uuid": "90e1c49e-66e8-459f-b4aa-5cda29205512", "value": "96:J+8cqHe2Lg9MgYUkzxaFKyphbyCz34EpafbyorgAl10f+eg4ytRsz3Emw0qaltEu:EbAgmtsyQazyo8+jnsbkCQBL83ObEn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727807737, "uuid": "185c6919-4e9f-4bb9-9847-868a7361c23a", "value": 10281, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727807737, "uuid": "b18da29c-7080-4083-bb44-643635f285e1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d74df5e9-8025-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727808548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727808548, "uuid": "357fc654-d91b-4833-8ea2-9222c3d32438", "comment": "Malware payload", "value": "b5709de87740787158cb6bdfb4106342", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727808548, "uuid": "fcabcd37-63cb-48c5-b413-0fe90939232e", "comment": "Malware payload", "value": "0e2790b58ae8f3d43c184979e354fd415e990488d7e4a3f5c8aacfc5d0f1ed68", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727808548, "uuid": "b37baa66-4026-4e35-939b-15c9acf8c92e", "value": "T13DA6D562DD8791FDE59349B8A006B3BF1734EB05885ECA38DF44DB91DB31A3CD8AA0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727808548, "uuid": "c1f014d5-0f1d-4b0e-b957-2f34300c860a", "value": "208ad2c8c137e3d4c33022e4bb87e9bb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727808548, "uuid": "bc37f991-4567-499f-85c6-a881ba240e83", "value": "49152:CUJ8u0q2/+Lvye47CzAY7zoqhr5uerH3HUkt59NiqaSDT8QpQt5JhGWH/vfcM8YW:hUq8+Lw7CMYIi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727808548, "uuid": "be76157b-71e5-4005-ae09-b39f02df72c7", "value": 9996800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727808548, "uuid": "fbe516c1-b298-45fd-9bf8-abe6aabaa206", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68f35aa5-8026-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1727808792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727808792, "uuid": "d56b7d9d-c008-4553-bf5c-509c217aaebf", "comment": "Malware payload (Socks5Systemz)", "value": "b304200791ddffcd6270a7941e57cbb7", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727808792, "uuid": "e38b99f4-3264-4486-836e-b15ef2273c9e", "comment": "Malware payload (Socks5Systemz)", "value": "b62c20b11f7ec8c92067c5687921ee97b9e4b171aa5bf388549ed28fbe078ae0", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727808792, "uuid": "9c75c121-3ad1-4d08-9875-9024e43d9148", "value": "T1CD86333FFA64A1F7E3B2607A7C58D6188A337265042E82DF5ACF62DE1635173CE4A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727808792, "uuid": "3165a888-9890-4c76-b3ab-9393715db1d3", "value": "80417b621299e3e1de617305557a3c68", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727808792, "uuid": "fb8d7e6d-7fe0-4419-9c03-bc98dc57f951", "value": "196608:DJZR2PJvGKeRcdv3OArayd/+kXI1usvtvAE3RtmXqLp:DgPMUwAraWBXID33LLp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727808792, "uuid": "a62f085c-53d0-41b0-8922-a267ccf5f5b9", "value": 8490410, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727808792, "uuid": "e520c30b-9ee2-442f-92a9-910220f6abc3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "faa7b557-8026-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1727809037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727809037, "uuid": "2efda008-9b21-4ace-8995-44cdc8b15749", "comment": "Malware payload (Socks5Systemz)", "value": "1ba39817d3e35ad42843a770a7c72b5a", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727809037, "uuid": "6ae03b42-296f-4910-89b7-feac08d72003", "comment": "Malware payload (Socks5Systemz)", "value": "393de7c010489052ff4db004d643eeb723abc65388fc5f0c2b6c2ef46648c757", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727809037, "uuid": "d0a5a4b0-5045-4b42-bb96-d860ce060104", "value": "T1238633CFA04F1030F1E6D8753C1BE348A1239955283FCA2E7169F38D557DE9A648AD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727809037, "uuid": "10594bbe-e793-4f5e-ba22-881f17f016dc", "value": "80417b621299e3e1de617305557a3c68", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727809037, "uuid": "2233bb16-9c8e-47bd-9c5a-be89cd40a27c", "value": "196608:DIIJ3Wr7440WvRMhEBWWOx+mIY/ifBK4UaGmpO+HPK4:DIIsn+W2hYWB8EiCL+HPB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727809037, "uuid": "1452f91c-8bda-490e-afc9-e5512d0980e9", "value": 8470925, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727809037, "uuid": "0102d0a0-a860-4968-9bb1-9a48147df34a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78a20988-8029-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727810107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727810107, "uuid": "05380391-bf9b-4f14-8e4f-3b7c083e40ae", "comment": "Malware payload", "value": "48dc716f4f061d9c4da712d9f78549bb", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727810107, "uuid": "531891dd-dca5-4e40-bcd5-7df54596369e", "comment": "Malware payload", "value": "3f18ce718d4298a8ab617afd9f57384f653d9e2a4734a570bcbbfbb2db550e21", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727810107, "uuid": "eaea8ee1-b9ff-4c84-aad8-a2c981d80223", "value": "T11FF2F11741EBEC38FA7A64325D9742D1FAF2382ED622472ECCD0251F8CF92411A167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727810107, "uuid": "a6e6cf6a-15ea-44ac-9a62-a552466155b9", "value": "768:xdXCmn1lbjc+u/zOZr8xdGqIU31t5G59Sv9sPCd:nS2r6SZr8xdG5UlrFuCd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727810107, "uuid": "835c4e38-4bd0-4118-a7d4-7bb5cf274569", "value": 37380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727810107, "uuid": "6a1ffa81-2c1f-4c92-9d52-429873d7f1f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "184ae181-8027-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1727810883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727810883, "uuid": "7f8d744c-7014-4e7d-af6c-b0fb21a51326", "comment": "Malware payload (Socks5Systemz)", "value": "c2e378c73feedf722d764319a75ac2b5", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727810883, "uuid": "9ca24973-9adc-4f84-8de6-d548fb0d383d", "comment": "Malware payload (Socks5Systemz)", "value": "4d425307edbb0752bb615be7784a22a81ff421f01682a8b1dd78dcb3cbcd7c58", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727810883, "uuid": "757089f2-bb17-44c1-a7e1-943f85cea9bc", "value": "T13A8633856E4ECBB0D6558F79AE5D1DDE2C26AB06141F1388B90CA64EC39F2C89C7C1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727810883, "uuid": "b18eec92-6523-40bf-844b-a998700037a6", "value": "80417b621299e3e1de617305557a3c68", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727810883, "uuid": "e53fe449-9b36-4280-8232-3faf7f559925", "value": "196608:DRTWc/I5zcS+4zM8WmWjP4qEUJFw/hkBkFiFvwSe:D8c/8zcWzhWDMqxbqykFIwSe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727810883, "uuid": "673372e5-9f6c-4128-bf5f-e57d2b4a3c6f", "value": 8475640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727810883, "uuid": "82d78816-b18c-448a-ba07-81c6b5d02c88", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4e779e3-802b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727811067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811067, "uuid": "43027a9c-b42a-4975-bf86-2a7d682f7c50", "comment": "Malware payload", "value": "ca987d9b1446c10553e72d172bd11968", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811067, "uuid": "3bb34a2b-b1fa-4503-b8bf-dd0aede09d4a", "comment": "Malware payload", "value": "ead2612778243f215e97a61431c351b4bfcea7d8ebc5b2ec2f903a5c45177faa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811067, "uuid": "2f4e0921-f693-44a1-87ab-1c405d42898e", "value": "T1A8F2F13541077A96D3784C368CEB4049F2EE4B7884EA3F55152DC268BEA460BE1E4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811067, "uuid": "b5bf3efa-4b5b-4921-8a30-45b870b4b5a6", "value": "768:wlKlrwoP8ZkPJ2iutS2OYY1/R9Ou6U+CL9Ac+GmP0Qaq3UIJd:wErww8YENS1vL6UtL91WPDN7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727811067, "uuid": "24f84061-f787-4e24-9155-b3e8d1b88829", "value": 36616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811067, "uuid": "176c33d9-ae7c-48cf-959e-9ec554b144bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4e9e3bb-802b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727811067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811067, "uuid": "fadf8d73-b0f8-40eb-81ba-e44567a8d8fd", "comment": "Malware payload", "value": "aa4d6ce0d54633d40f9e1a082aeac2b4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811067, "uuid": "1a3bfd6d-7c54-481b-83f9-d4f438d484d1", "comment": "Malware payload", "value": "7ca4bc1e5db3063ef35ff5c12bf8e7295af384479e2ec617c3bdd64fa03644df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811067, "uuid": "69365dd5-fab6-49b1-8134-991d76931703", "value": "T1D1430273A43394B5D5B0EC77DC9C0ABEF2A65E47C39B3157080322D4D36A08DDAE88", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811067, "uuid": "27bee8ed-9ae9-4aac-9d22-88430903434d", "value": "1536:WZGdBqUYJFT4gqXSLi9kzE672xYeyhXJP:WZGdBRYr42ukzvqShXJP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727811067, "uuid": "c1762635-2955-4110-99ff-3087785804a5", "value": 58340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811067, "uuid": "82347fb4-65d2-4c16-8f3d-89fae47fb64a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4f27fc8-802b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727811067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811067, "uuid": "531c51a3-547e-44d2-8f75-26c56351a862", "comment": "Malware payload", "value": "848c167e453336dd6259b95184955833", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811067, "uuid": "7d9de07f-5728-4e43-9ea8-2c4fffb81049", "comment": "Malware payload", "value": "69c17c7c0ae1f287c097437aae3998d4ac51301ad99c8a713bd0a0f85adca549", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811067, "uuid": "9f28b0aa-70da-4c17-8092-36c1f4751653", "value": "T1E2F2E15E1D88189AD3CC0DBD24262F126EDB66C57393979E9B28A8CC651F78F688C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811067, "uuid": "2d226cd7-0f6c-48c2-a838-f54abdd03c06", "value": "768:FGwiPffsTuZaZEYqvW73P9ByuHm/Fs6bul/WM3u:ViPfiuZKic1zkyEul3u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727811067, "uuid": "136350f3-ea41-4a71-a9e3-1d5fc2851a77", "value": 35768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811067, "uuid": "84b799a5-01fe-4d94-abd7-01f4b376acf4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7c0e97c-802b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727811126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811126, "uuid": "251d0069-5bf2-46f3-91be-2c99a5295b08", "comment": "Malware payload", "value": "9bc2141f76ffdb5ce4fbd1fd558a6b2d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811126, "uuid": "854f610c-d00e-4496-9dba-e37e7652e589", "comment": "Malware payload", "value": "c7ad79a9e8a07a898f6641cfd3c9f27492a9c7297d35f4392e33cd26f6734654", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811126, "uuid": "e287fd69-52a5-4762-a3d8-cdbae44983df", "value": "T1BCE2E120B742F071F7A01DB7D5EEC704422639D6F2AD7AEF771401AA1AC609A30D5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811126, "uuid": "06cd401b-8cad-44f0-8d7f-2cb0eccdd1eb", "value": "768:c/ps2ZakWcWN6piON0VEfkJbHbqnDJ66yPky0B33UD:MsgakWapiUiH+n96Mu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727811126, "uuid": "131476b3-32de-4eca-9f79-52f4c61e9d0d", "value": 31888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811126, "uuid": "71063be7-fe7d-464d-b113-cf5906de9522", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7c76002-802b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727811126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811126, "uuid": "3641761b-8ce9-433c-ba85-2bce41ac3bfc", "comment": "Malware payload", "value": "27a5a1cbceeef3b05ee64741cef57fed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811126, "uuid": "b8f5aa48-ffe4-40bd-8e0d-cc3ca3ea414c", "comment": "Malware payload", "value": "c564e18a1023977b0e16412f92bb91cdcc6650272be00a35f3e98d5961f28307", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811126, "uuid": "13e82b18-7d14-4c47-bb39-877dc303943e", "value": "T136F2E15B925399A3ECA6C8B222505B6419F00EFAB5EDFF0B3694FE475C4309E7001B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811126, "uuid": "fb414b29-0e07-4b37-b808-3048cb94975c", "value": "768:5wmhVBt5CxEdIOpGrOfSkRiC4j8S9hEwFoode6JgGlzDpUYso:6QbGqSwvDk+eVqYf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727811126, "uuid": "ebd796f5-37bf-4d51-8a6f-4161c1c82382", "value": 34816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811126, "uuid": "2338fca4-3bde-4ec8-8ec6-d63ffa3904cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7d4ce7e-802b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727811126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811126, "uuid": "ed85d856-9cb2-4ea9-8c7a-09ba47e96ddc", "comment": "Malware payload", "value": "6680d20311f8bd0a15b7d37c580abf97", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811126, "uuid": "33bd6b00-c459-4318-96ba-f1bf43087740", "comment": "Malware payload", "value": "af0be2f9d2597c192b3d9a7b2dcc6067bf646ac5fd05a34d46208a49492b7fd4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811126, "uuid": "073a870c-88e2-4710-aa54-2e86608a7e12", "value": "T10FE2E161E526855AECE00C38D9EA8949D3360D6E889A707CD1394938C2D5CE2DDB9E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811126, "uuid": "b958adc5-0015-4a3d-8e92-6adbae4baec0", "value": "384:LuCQKapchzUvI7wmWgWG5L1hYZb86Jcyv4vkb3uA5bfv9BLvU6tdQcMBkJMs9gwE:LqaUgsdMdLxW4vkbTD1FBwkJD9faW3UZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727811126, "uuid": "e37bdff5-0af9-4c19-8058-e8e664dde99d", "value": 33572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811126, "uuid": "967b519b-fc7f-4df8-ac84-d4e8f07fbedc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbb94b7c-802b-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727811186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811186, "uuid": "e0b571dc-432f-4e35-a342-8a4f9fb5e63e", "comment": "Malware payload", "value": "0c4bf1649503d85312c518ac2dd22a7b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811186, "uuid": "638f1c61-2744-4843-9873-871db16165ca", "comment": "Malware payload", "value": "1a216401cc7fa5035eaa435c48cd382cc1abf6d5e4eb02bb760fc8210b61ba7b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811186, "uuid": "902df016-9fe3-4ddd-8668-d407e5fe2bf8", "value": "T1B6E2E12682A415A6EDEE53FF468E9A11207524942FCC5EAB6F3F1EBF43712C933141", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811186, "uuid": "e5787b75-e525-4d08-b442-d0c601525fb8", "value": "768:m4S81JlxQcMyE2KXLTnMIT+O3tv1NfpkF2KtY:m4v7QbSKHnbT+Mv1NfuF2yY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727811186, "uuid": "483a5fa2-3de1-4f9d-a4ff-e758ab100b0c", "value": 31704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811186, "uuid": "f2494fd5-8058-4ea0-a9ef-b61830e85482", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "928cac02-7d11-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727811790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811790, "uuid": "548246c8-e574-4b82-950f-fcab96d856dd", "comment": "Malware payload", "value": "39f45edb23427ebf63197ca138ddb282", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GandCrab", "colour": "#a35472", "exportable": true, "hide_tag": false }, { "name": "IOC", "colour": "#cbae74", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811790, "uuid": "b1b965c6-53ec-49b0-b355-dac165e56064", "comment": "Malware payload", "value": "77fbb0d8630024634880c37da59ce57d1b38c7e85bdcc14c697db9e79c24e0de", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "GandCrab", "colour": "#a35472", "exportable": true, "hide_tag": false }, { "name": "IOC", "colour": "#cbae74", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811790, "uuid": "fedeb173-29c9-4625-ac08-28d41c3a46fd", "value": "T1BE02AFC54029A5EEF21CEC9233AD03ADA8D89D395D583F60E714630704A35F59C0EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811790, "uuid": "8c000d2f-1e05-4179-8ae5-4b0edfa06f27", "value": "192:8w3f/H9pFkeMpRmPIlHDCEkAH5gWPmEt3TXxl/6LkbgewuNvm:8snHrUVjbHH5g+mEt3z64bdNvm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727811790, "uuid": "9d72e733-4dd9-4a6d-be73-221a902baeda", "value": 8960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811790, "uuid": "892bd00a-f189-45ac-9c65-f11f3a40f7db", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "835392f9-800f-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727812047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812047, "uuid": "efc4b96e-c7a5-445c-ba01-f82362b4db80", "comment": "Malware payload", "value": "f68395b1dafead7be72777e356d8564b", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812047, "uuid": "9d525cd2-9b9e-46d7-b17b-10b23d294b47", "comment": "Malware payload", "value": "b00c0529bd3b84e166bf7422ceee3df0224be76728d6cfd61f8af60d2ff3e2a6", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727812047, "uuid": "c71f0807-bff4-47bc-b247-91e596624783", "value": "T1D4567372DE9B5AEAC1D30BB68846F17F6A34B7408D38C2F5DE41DF50E791B22D6889", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727812047, "uuid": "c1453e24-adee-41f9-b725-c4d943b27f0d", "value": "41db2083dac89343aef584a51a80b293", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727812047, "uuid": "877ef989-be99-4b9a-a19b-c7d819f8d6a6", "value": "49152:SdYz2izEiv9eDtYXyKT/sbwqEpd4QtKQmBBPeudDGG2ifvEcsUVlWyCSrbLbYIVt:99eDm3T/sbvad4eA3mudD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727812047, "uuid": "046a0bee-690e-4e41-84f8-97c7f83f6580", "value": 6434816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727812047, "uuid": "fd83568c-3657-4153-b6d8-56dab9c7bb76", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a67e97dd-8030-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727813191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727813191, "uuid": "8a88af71-f30f-420e-992c-95aac5c8ed97", "comment": "Malware payload", "value": "753d5ad0c496fd412b06b83de16a25d8", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727813191, "uuid": "55ec6b71-9681-4d58-ae9f-634e174e54f5", "comment": "Malware payload", "value": "5d922d8e8a58080f80d49c434ba3817884b2b9b698cb794ca15c2339f332f7da", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727813191, "uuid": "1d1a20bb-05f7-4896-8deb-7e1fa6a04d5f", "value": "T1F6949F2392E5BC70E6664B32CE2EC2F47B1EF9514E15376A23546F2F28702B2D2677", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727813191, "uuid": "0b4070f0-8663-48bb-a093-b139f6d26879", "value": "66efe5ea3e6965055bef6db9639a1e1c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727813191, "uuid": "7b6979c2-c494-4bc7-ae9f-770fb5017a28", "value": "6144:rZb6fPHQiclVC9TAGrY6uCSpMFJz4g7PS/PRzY5eHTLKLKw9rXn4T:rZbGHkcnSC2MFJz41XK5eHnKLNXno", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727813191, "uuid": "4f331e44-9b9a-4283-9ec5-9461af3e9733", "value": 427520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727813191, "uuid": "e8bcf0df-4df2-46ce-afed-01e0cdb4f3a3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1884bfd-8030-11ef-afe5-82aee05be84a", "comment": "Malware payload (MarsStealer)", "timestamp": 1727813209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727813209, "uuid": "21eb2448-e638-41e7-9a59-6dccf2c022e4", "comment": "Malware payload (MarsStealer)", "value": "7c170238c3fdf496e5420134b8f2c1e6", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727813209, "uuid": "5efcb191-5f1a-4f61-8fc8-e3b8981b4cb1", "comment": "Malware payload (MarsStealer)", "value": "33cbd0e0fa5ac49cb28c3f095077c7b82cc6127d78a0024eff5e5d9f3fc12029", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727813209, "uuid": "a61fd3d5-f121-4c50-9616-cd00541c97e2", "value": "T1708533D59103D17ACCC7057069B72381AF68A31C03B8067AAE57E53C9CBE359F4A29", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727813209, "uuid": "c137c060-2504-4a97-90a8-186feee6bfdd", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727813209, "uuid": "0144099f-6b7b-499f-a6f4-94ec6f37ceb3", "value": "49152:KZJAJB41PcUGRVoEDXVfi60LGv6zk565Po:CAQhcUGUEDXVfauT4P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727813209, "uuid": "0590fd82-9e19-4bb1-bc38-da7abbf723b4", "value": 1838080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727813209, "uuid": "93436feb-0863-4ba7-8bfa-370205ec685c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9dac1dd-8030-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1727813331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727813331, "uuid": "1e75bcc2-7e91-41b6-a1df-6f038ac30875", "comment": "Malware payload (Socks5Systemz)", "value": "89d5c5500d3f9d1b1c727dff1d325d40", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727813331, "uuid": "4794946d-4622-4de7-837e-cdee0269e0b3", "comment": "Malware payload (Socks5Systemz)", "value": "7b992a56a9f50779687cfb179a60711e41f1b44f310088cbbbcf063b70e7130f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727813331, "uuid": "c05eb81a-b231-4057-a3f3-eda57be7afbb", "value": "T162863349F91CD3E1C067D57DFE1622788769F6BF1D261AD8A1092A81E703B0AC15F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727813331, "uuid": "8f346bb0-3fb3-4ba1-8dd4-3fb29c9dff2d", "value": "80417b621299e3e1de617305557a3c68", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727813331, "uuid": "86b64175-0259-46ee-a69b-a6576c09e780", "value": "196608:DW8JS4CuPNOtixH112smzXLeXxYi1ramM2oPj7jvxpR8Nh:D3LCuPngdexYiNsj7jvPqr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727813331, "uuid": "499d1d24-1ab3-4151-9a81-f9e00b1d0f47", "value": 8499074, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727813331, "uuid": "17987af0-5031-4e56-acdc-2c92e648ffa9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ae1b3da-8033-11ef-afe5-82aee05be84a", "comment": "Malware payload (MarsStealer)", "timestamp": 1727814245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727814245, "uuid": "0facb3a3-4c1d-4346-b9c5-504320d0ee65", "comment": "Malware payload (MarsStealer)", "value": "022cc85ed0f56a3f3e8aec4ae3b80a71", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727814245, "uuid": "8ea30555-033a-40cf-be72-3fee21672feb", "comment": "Malware payload (MarsStealer)", "value": "bb28bb63ed34a3b4f97a0a26bda8a7a7c60f961010c795007edc52576b89e4d3", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727814245, "uuid": "fdc507d4-222a-45cc-8b4a-227853b17c00", "value": "T17074226B4EA51C31DE9629BE31B0D1692BB8D2C244E8CBF33179D19DC981F8E13CE5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727814245, "uuid": "f4a837f6-cb75-4af4-87b2-02ad1bfe03a8", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727814245, "uuid": "b47d4fb3-5dbb-4be6-8ccc-a87a6f566d66", "value": "6144:X5EAq+eU9BhaikesEDBVqaDf5kLslwEIF4TN4ha/qks1l9QjjmQ+Nb/Q5AQEO:J5vlBQB/EDBkaDRkyZIF4TN4o/29QjK0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727814245, "uuid": "e8e41537-bb69-42ce-91b2-51495701b86a", "value": 344992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727814245, "uuid": "2717af17-be66-48c9-b6f5-c41b7f4bbd0d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d416b06e-8033-11ef-afe5-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1727814556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727814556, "uuid": "eea8350b-d774-49fc-9bb3-63872132db44", "comment": "Malware payload (GCleaner)", "value": "a305ddf43a267d1fe83c21b2d7518418", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727814556, "uuid": "2393cfbe-72ab-401b-8e4a-8b2a2eea58e3", "comment": "Malware payload (GCleaner)", "value": "1242229f5928b2531cfffc1223f38421fdaaf9526015b051347b856f5cf820ad", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727814556, "uuid": "d6ef668b-dd23-4935-8ad4-0905a50a76df", "value": "T1AF94A02392E2BC60E5264731CF2EC5F47BAEFA514E5A775B23546E1F28702B2C2677", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727814556, "uuid": "f4c26d2a-2264-4bde-9d9a-e5ba572ffda5", "value": "66efe5ea3e6965055bef6db9639a1e1c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727814556, "uuid": "203895f2-2922-4e78-9e30-4489ae5bceca", "value": "6144:2+jMaiymH6stDyJ25hS5RS7zA+rlxM95+WrL5ETL1o4T:2+jM3ymH/DG25hQexrx+5ETJoo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727814556, "uuid": "be486d58-56c4-43fa-b73f-8addcc1af791", "value": 427520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727814556, "uuid": "bddc4eed-d265-4e16-8d19-125d50824275", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03961b50-8034-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1727814635, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727814635, "uuid": "1140d08f-e6df-4748-8267-c452e3968944", "comment": "Malware payload (Socks5Systemz)", "value": "ce75c9fbd798144bde21fd1d003bd7a5", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727814635, "uuid": "524a03cb-457c-4520-82f7-01b8c36131ec", "comment": "Malware payload (Socks5Systemz)", "value": "7b7c4bc4a3a29f45a29b72d01110866cd188eeff58369b37a662c2abf5dd3c75", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727814635, "uuid": "41a9570a-532f-46ab-9d92-459cd31139e0", "value": "T1718633D1B3A3487ADBCACE740E94E9C10167916D59B2D8C5308AC38C642EF56EDF63", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727814635, "uuid": "1598e837-650b-497b-af1b-45ce55d8be5c", "value": "80417b621299e3e1de617305557a3c68", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727814635, "uuid": "784e8139-58d2-4741-9b7f-33072a1dbdbd", "value": "196608:DDaFcBtNzNGN0OWccp80YBa4KX8EISWgunK/sK:D2WBnzNGN0O7cG0r4CvWga6sK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727814635, "uuid": "fd774ae6-96a3-4800-b81d-cbdbcfae7e27", "value": 8472810, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727814635, "uuid": "b698420d-d507-4f97-8fab-ff192de559bc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "931bee59-8035-11ef-afe5-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1727815306, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727815306, "uuid": "16bd30f7-a999-4301-a638-57476760f1a0", "comment": "Malware payload (Smoke Loader)", "value": "132753695497223a60f72d6dc2b4f926", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727815306, "uuid": "88c38c4f-d5e3-4419-a70f-7d5e6b3843d7", "comment": "Malware payload (Smoke Loader)", "value": "9e07be9ff527040b8b7f4307c7a9f171b67881c4470dc4f7b5f6e846a53000b9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727815306, "uuid": "91edaf7c-44fb-469e-8b70-f5e7a11ddf8c", "value": "T11B849F2372E27C50F5268B31CF3ED6E87B2EF9A04E55376A1258AA3F15702B2C1677", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727815306, "uuid": "cd787caa-1e65-4b81-935e-1f9bf8bf9294", "value": "5d6eca90d87f0b951e502c326dc551af", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727815306, "uuid": "ef082da4-6d77-495d-a912-cfaa07a6a4ec", "value": "6144:ldPxJFvFmTjL/tpKGt7x7fdSRdBsGmWOHxG1H9gGMbhx/YBzp:rVSjL/t4ExcRsY1/MF9YBd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727815306, "uuid": "f60228b7-1c85-4eb4-9ed1-466a76c1f9f8", "value": 398848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727815306, "uuid": "3a3bf7f3-a736-471f-b189-f1958b8ffc89", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b40e3ce0-8036-11ef-afe5-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1727815790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727815790, "uuid": "43570eb0-4391-48fe-a1d1-8aaf2b4bd0b9", "comment": "Malware payload (Stealc)", "value": "59d30046d8afad0c902a7239536492d0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727815790, "uuid": "b34e3435-6417-40e4-9290-53d0ddc28e1f", "comment": "Malware payload (Stealc)", "value": "4b5c48d4a1ce78668705767c5b6e4935b6cf93768831aff6b61d308c8fc3a6e9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727815790, "uuid": "1b656aef-3387-44bd-aa0f-003c9c6a9765", "value": "T17A849F6352E17C64E5268F32DE1FC6F46B2EF9608E55376A1238DA2F24B02F2C1677", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727815790, "uuid": "e4495ef7-0471-416f-9990-79a8ee6d6568", "value": "5d6eca90d87f0b951e502c326dc551af", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727815790, "uuid": "f4c7eaa6-a650-421d-a0cc-b18c9550227f", "value": "6144:NEyYKIhZJjzbvCfQcFLwzM94L7zGeVCenNwk9YWn:3sDzbvCfQcxranauh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727815790, "uuid": "91b6b6e8-cfd7-4353-ba7e-7bc8574adb64", "value": 397312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727815790, "uuid": "4ad219ff-b62a-47e5-b830-6fb9475bc36a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "934ea975-6e5a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727816735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816735, "uuid": "668786a7-ff6b-401d-ad4a-dabf554be2f7", "comment": "Malware payload", "value": "040dc4cf0845934bb9e2fea239c9af04", "object_relation": "md5", "Tag": [ { "name": " opendir", "colour": "#6abad6", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816735, "uuid": "0bcb55d9-38bb-43b4-9748-58034181585d", "comment": "Malware payload", "value": "c14e71b86173f5fa0f4b487931f8b6651ff8ffc1dd3a7f0908d17adfbee7169e", "object_relation": "sha256", "Tag": [ { "name": " opendir", "colour": "#6abad6", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727816735, "uuid": "8308a008-810d-4706-a72f-7ad3c13dec8a", "value": "T1F3D533743BE3E5A9901D9C8BF120951AA8457FC96491C66DDB0F40FB80E9ABF83370", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727816735, "uuid": "8638b1b6-e179-42e5-9eef-6978d0321b42", "value": "49152:x9D3K0lOCxN/84swrTi7CA5Bg7jc0DpALpcE48q95VSJ1HEfGzjy3dxsYywtdOiv:nDa+OCxqErB0q7jNOp74JBSJ1TyteYys", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727816735, "uuid": "41d99b50-8161-4c6f-a562-26339401d6de", "value": 2988198, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727816735, "uuid": "7b36aa26-1589-4f61-8760-632bccfcd7fb", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aaaab118-8039-11ef-afe5-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1727817063, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817063, "uuid": "cbc76647-6dc8-4cec-ad83-50348ab6b95c", "comment": "Malware payload (Smoke Loader)", "value": "be4515f8b2bd9dcb4010ce37fe086c6d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817063, "uuid": "474c754a-3be4-4d04-95f9-be50e95b3144", "comment": "Malware payload (Smoke Loader)", "value": "3d37d9cef448d860bab7496c9954f6573a2239c3a4efdf42c09adc204c4d163d", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817063, "uuid": "e00bb88e-6373-4a2b-9963-55457288c7d2", "value": "T18F849F7352E17C64E5268A32CE2FC6E87F2FF9614E55376A1258AA1F18703B2C12F7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817063, "uuid": "95d670a2-03ea-468d-b510-4204e3029d4e", "value": "5d6eca90d87f0b951e502c326dc551af", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817063, "uuid": "1b729736-28c3-4b97-8a5f-d0043fe4356c", "value": "6144:LxVFKxrqx+zbvPIs7K7O0Z26nZ4q52rUBCTr:IdDzbvPIWcZ4q5ouCf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727817063, "uuid": "23930b80-9356-4bcd-9d22-3067bd3d365c", "value": 397312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817063, "uuid": "cfdb7b54-3020-4390-ad68-b74010faab34", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e62904d-6e5a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727817100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817100, "uuid": "ae1e0381-4f41-4bfa-8a54-152d6d6adb40", "comment": "Malware payload", "value": "b0ddb6b2a2b1aa6118ec6940b27bde04", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817100, "uuid": "90c33bdb-7d36-44e9-9e30-04827d4c56c0", "comment": "Malware payload", "value": "7e6e508f7ffc277061c1588a318c66c999015991c866a6941924c1f0a34c58f5", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "gz", "colour": "#688ea3", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817100, "uuid": "eba75eb8-301f-4062-a00d-659ad220f965", "value": "T17647332DB139EBA9D7D5A130C7832F8AE5627834BCD9A897DF313B1014623C76311B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817100, "uuid": "673c3b04-347d-45a3-b20a-d9311f219117", "value": "393216:dR9tUNg9RwwwU+TkiUwjvd/kqrw5xY+tkGO3dskZugSDArSQUD0JwrEFVRZIcFd/:v3UNy3fm/9Hri/+LSkQgvHR6WJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727817100, "uuid": "486ca024-f7bb-491b-8bd9-2d502777ddaf", "value": 26130078, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817100, "uuid": "2731f19d-f09f-4b3a-a9bb-4e4a98af50f7", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8610132f-803a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1727817431, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817431, "uuid": "c0c6f742-a424-464e-a2df-0f6511f462df", "comment": "Malware payload (Amadey)", "value": "05b990fd9638911aa7ffe48eebd8f328", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ZharkBot", "colour": "#326594", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817431, "uuid": "87d06582-6c22-4ea5-8628-1dab00e02372", "comment": "Malware payload (Amadey)", "value": "761671ae2c713fefa7b788bd192ecb6bdc2b02a68b3c8b3566b2affae5618f77", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ZharkBot", "colour": "#326594", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817431, "uuid": "90d8cef9-7330-4616-8746-62dc530b1599", "value": "T1E68533F181B09797E9BDC93237D68AD0A87A70F610371D4F7D4D91B6888E8426C5AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817431, "uuid": "b4debed7-fdd6-4c5c-947c-e339f13fcf68", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817431, "uuid": "bd66c81e-80ef-49ce-bbd9-173e318c926f", "value": "24576:1k+NmKH89pShIb9J+cyLheDfTfdY+bvpt42210MSwRHc4ScCE9WelVxseh6B6VrZ:y2Z8aIJ8opbvpt4t9SwLsWpAsVrpK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727817431, "uuid": "95474dbe-0e4a-4b29-9761-5caa098b1ae9", "value": 1874432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817431, "uuid": "7c73e830-c3e5-40ad-b402-2ad4e3491c80", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d04e6531-803a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727817556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817556, "uuid": "79dbafd4-68e3-4b20-ba1a-cb6e607abada", "comment": "Malware payload", "value": "466e673eb9f86ec90a819e360cbd3b72", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817556, "uuid": "24a4e391-ac32-419d-b69c-c7a840339ac5", "comment": "Malware payload", "value": "bee94e879349c3b9280d7a0d2e262be5cb8920ff0e804ecf2c5681c1df74fac9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817556, "uuid": "27218d0c-eff1-4da2-ad29-a6bf8a5be738", "value": "T165159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817556, "uuid": "862e1a40-d240-4982-8744-48726b908e34", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817556, "uuid": "546814f2-8e0b-4d5c-8f62-7e7973a37dc3", "value": "12288:cqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgaTTI:cqDEvCTbMWu7rQYlBQcBiT6rprG8anI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727817556, "uuid": "aa8965d8-c939-4ccd-9dfc-3b64ff59c76b", "value": 918016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817556, "uuid": "e637ffc5-4f54-44b4-b3df-359eeb126e32", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef1d87d1-803a-11ef-afe5-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1727817607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817607, "uuid": "005dd9e0-a9d8-427e-a703-c13e984f816b", "comment": "Malware payload (Smoke Loader)", "value": "007fa2c8c8ab1fbc6867e44db35c063e", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817607, "uuid": "d4623631-baf0-4f8a-9e9d-42679a72114a", "comment": "Malware payload (Smoke Loader)", "value": "fde9a151f01aaa4bd10355337c8146e28c0716f10a4bdd70718f007f321827fe", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817607, "uuid": "48dbe58f-c3cb-4b8f-b97a-48ea93bc71d8", "value": "T1EA849E2393E17C61E5264B31CF2ECAF87B1EF9604E55376B12549A1F24B03B2C2677", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817607, "uuid": "8d522f1f-1790-44ac-ae03-672ffbba7057", "value": "5d6eca90d87f0b951e502c326dc551af", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817607, "uuid": "e4b28152-3e4e-47a9-858b-78e452924f3b", "value": "6144:yB5v9Z13FO0jL/cyv3+Is7RIw0k2aBh4MCU0m9ccVr:CVRjL/cs3fsiEh4MCjm9/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727817607, "uuid": "18d5efd2-e9ca-4ac8-b6a8-3fc171bc0d24", "value": 398848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817607, "uuid": "313b8ea1-2645-4fef-acc1-cfae72a2056b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7822bae3-803c-11ef-afe5-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1727818267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727818267, "uuid": "be48dd3f-1a1c-483f-8742-94a6fdef004d", "comment": "Malware payload (Vidar)", "value": "62d163b5e92c65e84a9625b0e94be1c5", "object_relation": "md5", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727818267, "uuid": "162ee837-9cf4-44f0-bdae-96e077869e64", "comment": "Malware payload (Vidar)", "value": "3111b931a7221a2b5ba2b0b7a4e6f51ec5f56d9d11aeb318098796ad411968fe", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727818267, "uuid": "d2a2265b-f83a-40ab-b03d-b3868dc8d4af", "value": "T1BF9423E80F884C11EBCC4972B5A08A707FF056B27BAD8A6776A4C09E95023553FE53", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727818267, "uuid": "56cac3e2-d8bc-47f4-9659-8cbcf22072bd", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727818267, "uuid": "395821ba-3f2a-4f58-8505-81f0d58699ca", "value": "12288:y1BT0kmtINYhQSAu/962sRCc8Tft79aaTEO:Hh6YhnFsR4TFxnTt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727818267, "uuid": "d213d66a-8c47-4df3-9003-b22363949a0b", "value": 423840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727818267, "uuid": "403b837f-e007-4dc1-bd0f-cd0f0706d80d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e087344-803c-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727818304, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727818304, "uuid": "5fdb4a61-19a5-4872-aea0-e77898dd7cb3", "comment": "Malware payload", "value": "a00b2cfa83db42323e19d954710c74e1", "object_relation": "md5", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727818304, "uuid": "abe7730f-5004-4337-9e3e-0ea9c48e03ae", "comment": "Malware payload", "value": "04cd12393aa1e04aaca2f1f05a0da8ea1b0003a01a66dfc863991034f836f45a", "object_relation": "sha256", "Tag": [ { "name": "cryptbot", "colour": "#96129c", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727818304, "uuid": "32749b69-b769-4740-8706-5bc8710bf243", "value": "T1959533C5B5B21617F77AD4B33FC9EE346A331ACA908F8B56203FEDCD40A25698C512", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727818304, "uuid": "11dc20e8-492a-43aa-9c21-86db2761f8dc", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727818304, "uuid": "14c1f449-7bf5-47c1-9879-72a4cd79c5a1", "value": "49152:qvnMlvvvqFI3rUUan7yeCz3i96K0nLAcR3YmPXHXcK:64vWI3rJa7yeCzjDnUcRImPXHr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727818304, "uuid": "5530e5ad-25a7-4e74-bec4-f4330f41d373", "value": 1967992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727818304, "uuid": "05d786eb-fb1d-42e1-8bc4-00556b61ec19", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4022e593-803f-11ef-afe5-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1727819461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727819461, "uuid": "2924ef3e-11e3-4643-a02c-fc9fbf50d81d", "comment": "Malware payload (Amadey)", "value": "e8bb526e9c17d0bf6bce92e819331e48", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727819461, "uuid": "21d2f7c7-a4cd-4399-b5e2-7778f5916c41", "comment": "Malware payload (Amadey)", "value": "1e023e5272b8a69359530617ee5f44f5826b4da85c24092ef8136cd4b2ac4269", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727819461, "uuid": "e8a7e12e-536f-4a5d-901c-fb5eb80b6d78", "value": "T1BA95336E64A63CDECA4591B18E5A0CC86774FA4493C7A5B476C033360DEF2EDB1AD8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727819461, "uuid": "27a54179-4fd6-4011-9cfd-c55e3e3d6262", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727819461, "uuid": "0fd694a0-f5ae-4b50-9555-89f7a5218797", "value": "24576:ezWmbyRdBQFv9eIkO+wt2g00TVEZW30wiJweCCzLfOxsDotgF/s81HAbUq0l31tP:ehbyXq99emhEgR2Z60wECCzyDa5Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727819461, "uuid": "61a58936-9b53-4e4e-bc7e-bed2dd32af4e", "value": 1901056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727819461, "uuid": "2463c221-20f3-4742-b159-e7803f52dd77", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1727822526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727822526, "uuid": "3f6c1d8f-0d2c-4537-9059-780ed8b50445", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727822526, "uuid": "9aec5bfe-4bbc-441e-bdbb-d2614bfc293c", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727822526, "uuid": "efb17ff7-3b75-4697-8b5d-ef2a24ce9e86", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727822526, "uuid": "2f3bb656-a9b3-4178-88fc-15cc68400715", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727822526, "uuid": "0b066eb6-3a16-4e16-9292-c170cca4eaa1", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7298adf2-8048-11ef-afe5-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1727823412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727823412, "uuid": "d1d123ae-81cc-4639-8ee9-045ff4fbc8c2", "comment": "Malware payload (Socks5Systemz)", "value": "af71fcf5f957f53b87699ff22980cfcf", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727823412, "uuid": "78f0a447-85a8-4ef7-b857-4172ab6649f8", "comment": "Malware payload (Socks5Systemz)", "value": "a696f19230abb67a2575e815c8421b33fb5630b8767fc735ac253691673bdd5a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727823412, "uuid": "2e13ccd4-107d-4d4b-915f-f6a5a701202f", "value": "T163863301FD75C0B9C9654AB62A01E6B9770334FABC08E497287CE8ECDB8755113897", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1727823412, "uuid": "df3f2afc-a58b-4f8a-815e-dee5df1c3ac8", "value": "80417b621299e3e1de617305557a3c68", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727823412, "uuid": "b5d57657-ec51-4982-a806-702b6831fc51", "value": "196608:DCSVpGJG8bDgItwbt9DUUhlaATBoO/hzFlE5hc5mleI68PaJlxJBppS:DxqJG83PtYt9lPPoM0Y6aJLJB3S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727823412, "uuid": "6da15f75-cf27-46db-997c-e1e092349fd4", "value": 8503678, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727823412, "uuid": "bbff2ad4-11e0-473b-a966-a6b5e36260ce", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afa09eb6-8048-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727823514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727823514, "uuid": "67ceb015-452f-4a24-affc-f35fffc12cf7", "comment": "Malware payload", "value": "54232f5000daba160d5ede14896ce768", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727823514, "uuid": "ce6be7d8-610c-4cb7-83f6-f74a6dbfb9c1", "comment": "Malware payload", "value": "ba180f864b5564f2062ee7279efa83fa5c16cdfa7c429bd1a4b093fea566d6f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727823514, "uuid": "b12c584e-9ab3-44be-9cea-0344f126aeeb", "value": "T181332942B31C0543D1721EB4353B17D0D3EBAA9222E4F789750F6B4A81B5E336586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727823514, "uuid": "dfeb02af-9ebd-410a-94ba-db940e4c9c52", "value": "1536:SEvDg3V5FqlC9PmKxKl3/vFqVetKiI820C:S0Dg3jeKxIHsuKiIr0C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727823514, "uuid": "9ed92534-c87a-46de-acb7-f3d457bfa20a", "value": 52628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727823514, "uuid": "ab33f686-380f-4e02-9ce5-5e963d74270d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b3f0240-804a-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727824178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727824178, "uuid": "fd42b2fe-b151-4f0f-974b-02fe7d8814e5", "comment": "Malware payload", "value": "b64dbb93201f56a5d4b35356859c526d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727824178, "uuid": "f153648c-f5fb-47dd-a9a4-44009c925e89", "comment": "Malware payload", "value": "19523236fccdc5e3c7f4e143008694e398d3ab1f9fde069fdb875204647bc117", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727824178, "uuid": "7d2161b1-ffb2-4508-920f-c52d1a60a0b7", "value": "T12B330885BDC29A16C6C517BBFE0F42CD37266398E3DE7203DD252F51379A92B0D6A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727824178, "uuid": "2d88770c-ac72-4660-9895-c534b151fb6b", "value": "768:IEtj5DvYu1TPvx28pWeteTcXoI7gwfigV6N5qm80+ck70Z4ywif7pXR3d:ZLvltpWegIZfiG3Q+ckYZ4gVh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727824178, "uuid": "fdeb7d6a-fca0-4c1d-8268-74b8210a2582", "value": 54408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727824178, "uuid": "6d62d7b7-f3a7-4119-a724-2546a5bdd20b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34e27847-804d-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727825455, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727825455, "uuid": "8ac18a30-2f49-4c49-805c-6641e0c25569", "comment": "Malware payload", "value": "da5300e7e468b64e75fe3912f86c5c5c", "object_relation": "md5", "Tag": [ { "name": "csv", "colour": "#56b72e", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727825455, "uuid": "ecbfa26e-5b80-4a2f-8869-68fb334f7463", "comment": "Malware payload", "value": "f8a7fa62e4d8e46714944d366b4f4f92dae586e060cf58bd6212a2f16e860e96", "object_relation": "sha256", "Tag": [ { "name": "csv", "colour": "#56b72e", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727825455, "uuid": "5800d664-fbb8-4def-ac56-ccc2258e0675", "value": "T16722ACECE36AE60E7114F2632FD457E07335488FD44B1FC3ED54E5812079BAA52246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727825455, "uuid": "63e2d77d-97ce-436b-a51a-b9b15ad2bc43", "value": "96:J+8cqHe2Lg9MgYUkzxaFKyphbyCz34EpafbyorgAl10f+eg4ytRsz3Emw0qaltEO:EbAgmtsyQazyo8+jnsbkCQBL83ObEB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727825455, "uuid": "68f9c089-1a43-401a-952f-2e1e8429b54b", "value": 10388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727825455, "uuid": "4148fe24-1ed3-44d7-ac81-828cada5a7aa", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86ef95ed-804e-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1727826023, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1727826023, "uuid": "5ea1d225-b78f-41eb-8ec5-9ae66f732f53", "comment": "Malware payload", "value": "438c2d4fed5f70433d0ad8312850e97c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1727826023, "uuid": "adafe891-7a6a-46e6-939d-d7f4ae7d0b56", "comment": "Malware payload", "value": "9fd010104610e16812212883835b62baaed79f23319432b26bde0e1b7d0653b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1727826023, "uuid": "360ae729-7a27-47f2-b644-7163917b38a1", "value": "T1FE237C62CC697E58E9589A74F430DF7E1B53A459C5473EE98462C27AD003EDCF8092", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1727826023, "uuid": "bd9ea349-147c-4bf8-beb9-3666de183ffa", "value": "768:fa0NZnsQP3X0O4hBcofRt06ZKPohRRWU7qoHtKNjpC4:fZZnsQP3Nuco5t06wPohn7NHkjpC4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1727826023, "uuid": "49218e56-8005-40e3-a25a-40fffd457775", "value": 47440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1727826023, "uuid": "9c31ba7c-076f-4a6e-aa74-e64f9aa2bd7d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727740808, "uuid": "1ef92f3f-7f88-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.187.225:53842/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727740866, "uuid": "41dcda8b-7f88-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.26.104:56630/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727740997, "uuid": "8f73f057-7f88-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.197.115.25:51334/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741006, "uuid": "94f4c728-7f88-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.78.247:56878/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741044, "uuid": "ab9c22c7-7f88-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.152.49.138:33741/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741046, "uuid": "acb868a4-7f88-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.51.115:41330/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741046, "uuid": "acc2bc93-7f88-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.177.5:33718/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741046, "uuid": "ad1554fd-7f88-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.166:55833/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741048, "uuid": "ae0c3f46-7f88-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.140.97:55987/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741049, "uuid": "ae9ca5b7-7f88-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.183.173:59525/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741052, "uuid": "b054a2c8-7f88-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.199.180.80:46178/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741054, "uuid": "b19c1972-7f88-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.203.61.69:36558/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741074, "uuid": "bd6d7a28-7f88-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.36.245:34697/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741075, "uuid": "be098e64-7f88-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.109.164:51643/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741079, "uuid": "c06d66f6-7f88-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.158.158.212:41021/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741090, "uuid": "c72ebfaa-7f88-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.119.27:35987/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741108, "uuid": "d1f66c10-7f88-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.98.162:35034/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741466, "uuid": "a7182375-7f89-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.202.128:44326/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741526, "uuid": "cad34fa5-7f89-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.115.162:60840/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741586, "uuid": "ee98bc8d-7f89-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.124.0.244:41851/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741604, "uuid": "f97be9cb-7f89-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.100.93:39874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741665, "uuid": "1dfeab46-7f8a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.56.10.239:42281/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741828, "uuid": "7f23c052-7f8a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.59.13.232:56026/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727741948, "uuid": "c657278b-7f8a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.91.189:59383/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742007, "uuid": "e97184e5-7f8a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.97.203:59525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742066, "uuid": "0c9f0438-7f8b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.184.131:43862/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742066, "uuid": "0d06a04c-7f8b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.211.119:38957/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742127, "uuid": "3121de88-7f8b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.77.126:44640/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742186, "uuid": "5440f091-7f8b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.90.182:34434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742190, "uuid": "56e7a143-7f8b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.104.6:41190/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742246, "uuid": "7814d50e-7f8b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.164.177:50501/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742369, "uuid": "c15c1186-7f8b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.152.165:38944/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742431, "uuid": "e6234fd7-7f8b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.212.134:45400/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742547, "uuid": "2b7c279f-7f8c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://lmhyt.shades.whatisaweekend.com/orderReview", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742611, "uuid": "516e6a68-7f8c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.32.144:52615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742647, "uuid": "672962a4-7f8c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.246.246:54202/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742848, "uuid": "deeab94c-7f8c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.50.255:53469/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742848, "uuid": "df32c39c-7f8c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.223.142:48014/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742860, "uuid": "e6076149-7f8c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.245.77:52662/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742907, "uuid": "02596c96-7f8d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.93.162:35585/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742908, "uuid": "02796223-7f8d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.98.162:35034/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727742967, "uuid": "25b9cf06-7f8d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.11.242:50516/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727743025, "uuid": "48b4ca0f-7f8d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.81.29:42585/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727743146, "uuid": "90cf8ff3-7f8d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.172.211:38356/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727743207, "uuid": "b4addcad-7f8d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.104.6:41190/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727743209, "uuid": "b63ad495-7f8d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.240.2:36923/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727743385, "uuid": "1efd5a3a-7f8e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.235.202:45530/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727743410, "uuid": "2db76167-7f8e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.242.133:47983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727743507, "uuid": "67898255-7f8e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.173.83:48135/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727743509, "uuid": "69166f34-7f8e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.178.246:58803/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727743625, "uuid": "adfdc532-7f8e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.184.148.3:43693/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727743685, "uuid": "d21a0f0d-7f8e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.76.170:36812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727743694, "uuid": "d75216aa-7f8e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.58.228:43533/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727743745, "uuid": "f589f184-7f8e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.75.127:58176/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727743807, "uuid": "1ada24a6-7f8f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.90.182:34434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727743870, "uuid": "400676fd-7f8f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.53.178:50316/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727744001, "uuid": "8e7a659a-7f8f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.134.164:58577/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727744019, "uuid": "9901850c-7f8f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.101.114:59382/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727744046, "uuid": "a92bea3e-7f8f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.164.177:50501/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727744109, "uuid": "ce5ca848-7f8f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.162.157:36563/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727744179, "uuid": "f889d35e-7f8f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.120.204:34307/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727744299, "uuid": "3fe355f2-7f90-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.225.23:46078/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727744468, "uuid": "a4647526-7f90-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.2.146.216:42510/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727744474, "uuid": "a7fb445f-7f90-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.246.149:55615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727744526, "uuid": "c75ec316-7f90-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.31.82.160:54633/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727744548, "uuid": "d457912d-7f90-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.218:56805/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727744585, "uuid": "ea6c0230-7f90-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.11.242:50516/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727744663, "uuid": "18e52caa-7f91-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.24.225:39045/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727744707, "uuid": "32cdcfa4-7f91-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.81.29:42585/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727744707, "uuid": "32d4270d-7f91-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.240.2:36923/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727744724, "uuid": "3d4a4fec-7f91-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.250.27:57121/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727744825, "uuid": "794b12f5-7f91-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.172.211:38356/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727745035, "uuid": "f6905bab-7f91-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.242.133:47983/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727745065, "uuid": "084cb0a0-7f92-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.233.152:49555/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727745125, "uuid": "2c387c79-7f92-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.235.202:45530/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727745246, "uuid": "740c0755-7f92-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.178.246:58803/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727745246, "uuid": "74155e22-7f92-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.101.114:59382/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727745324, "uuid": "a2d69325-7f92-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.75.228:60177/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727745374, "uuid": "c09932ab-7f92-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.191.19:60657/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727745426, "uuid": "dfa46f69-7f92-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.176.96:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727745503, "uuid": "0dbd9d48-7f93-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.184.25:35765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727745545, "uuid": "26901f19-7f93-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.7.243:52075/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727745608, "uuid": "4c23c6c8-7f93-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.12.127:38885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727745608, "uuid": "4c257631-7f93-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.228.130:41429/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727745608, "uuid": "4c308a25-7f93-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.198.69:59942/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727745611, "uuid": "4dbdd737-7f93-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.2.146.216:42510/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727745623, "uuid": "5527a55c-7f93-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.115.247:51616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727745665, "uuid": "6e58413a-7f93-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.100.93:39874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727745698, "uuid": "8174f6b3-7f93-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.227.163:55315/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727745907, "uuid": "fe93c93f-7f93-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.246.149:55615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727746026, "uuid": "4546a62e-7f94-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.120.204:34307/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727746042, "uuid": "4eb7154d-7f94-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.84.226:45974/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727746145, "uuid": "8c5b397d-7f94-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://tcgeo.shades.whatisaweekend.com/orderReview", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727746211, "uuid": "b3b1a9c6-7f94-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.250.27:57121/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727746268, "uuid": "d5ac9b76-7f94-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.75.111.206:32922/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727746386, "uuid": "1bd9291f-7f95-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.32.144:52615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727746390, "uuid": "1e764e29-7f95-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.146.62:33051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727746394, "uuid": "20651ed3-7f95-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.247.49:45240/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727746454, "uuid": "4451b93b-7f95-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.38.152:42733/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727746456, "uuid": "45c1fa83-7f95-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.253.59:50645/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727746462, "uuid": "4903bc81-7f95-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.78:54639/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727746511, "uuid": "661ae3aa-7f95-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.75.228:60177/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727746625, "uuid": "aa806361-7f95-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.201.12.127:38885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727746807, "uuid": "16c5709e-7f96-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.156.99:40750/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727746807, "uuid": "16cdeee3-7f96-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.223.102:40742/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727746866, "uuid": "39e889b3-7f96-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.14.144:35076/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727746870, "uuid": "3c34351c-7f96-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.34.170:55971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727746925, "uuid": "5d2d9465-7f96-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.7.243:52075/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727747055, "uuid": "aa99483d-7f96-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.247:36555/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727747109, "uuid": "cafd9495-7f96-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.88.207:35794/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727747110, "uuid": "cb0f90e6-7f96-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.198.14:46333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727747286, "uuid": "347adfa8-7f97-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.238.254:49989/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727747344, "uuid": "571a37cd-7f97-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.132.220.241:50813/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727747346, "uuid": "57ba9b9c-7f97-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.116.21:58355/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727747348, "uuid": "5900f5e3-7f97-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.79.198:33141/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727747353, "uuid": "5c2cc3cf-7f97-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.203.127:54473/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727747407, "uuid": "7c4f9859-7f97-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.156.99:40750/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727747465, "uuid": "9ed6754d-7f97-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.167.6:35089/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727747465, "uuid": "9f3762b0-7f97-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.191.19:60657/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727747466, "uuid": "9f49d420-7f97-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.84.226:45974/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727747542, "uuid": "cc89d233-7f97-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.183.57:39494/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727747586, "uuid": "e7598c9c-7f97-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.49.10:59451/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727747649, "uuid": "0cd35e9c-7f98-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.198.69:59942/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727747710, "uuid": "30bd18ec-7f98-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.77.58.153:45365/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727747887, "uuid": "9a72c20a-7f98-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.247.49:45240/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727747945, "uuid": "bd3d11b3-7f98-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.21.114:60186/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727747963, "uuid": "c8009a7d-7f98-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.146:51310/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727748012, "uuid": "e5077857-7f98-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.119.146:44940/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727748144, "uuid": "33da7f8f-7f99-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.104.158:40252/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727748250, "uuid": "72b33214-7f99-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.203.108:57297/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727748255, "uuid": "75ed1af9-7f99-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.113.179:37083/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727748257, "uuid": "76ca0f4f-7f99-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.174.8:53711/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727748323, "uuid": "9e1cece2-7f99-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.246:59724/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727748371, "uuid": "bb04d8ba-7f99-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.81.253:50244/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727748425, "uuid": "db04cb19-7f99-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.34.56:32946/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727748430, "uuid": "de386797-7f99-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://164.177.177.19:33337/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727748545, "uuid": "22c86bad-7f9a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.220.162.90:43446/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727748670, "uuid": "6ce1f9e5-7f9a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.155.233:33519/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727748685, "uuid": "764bd676-7f9a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.29.202:46148/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727748845, "uuid": "d569e980-7f9a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.110.200:52782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727748848, "uuid": "d71c18b7-7f9a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.112.249:47148/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727748908, "uuid": "fae403a6-7f9a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.41.195:52373/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749026, "uuid": "4184c6d8-7f9b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.116.21:58355/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749146, "uuid": "88abe688-7f9b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.77.58.153:45365/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749146, "uuid": "88da67b8-7f9b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.250.29:41437/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749209, "uuid": "ae4e4baa-7f9b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.49.10:59451/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749266, "uuid": "d02cfafc-7f9b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.218.24:35102/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749387, "uuid": "183c6ed1-7f9c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.94.182:43408/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749460, "uuid": "440a7289-7f9c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.6:49257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749566, "uuid": "83827bf7-7f9c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.133.67.10:48716/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749577, "uuid": "8a138eaa-7f9c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.180.211:33335/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749582, "uuid": "8caf62bd-7f9c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.183.110:52658/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749626, "uuid": "a6f4dd7b-7f9c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.219.99:50106/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749667, "uuid": "bf605fa1-7f9c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.250.146:58860/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749686, "uuid": "ca768c94-7f9c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.217.241:35051/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749746, "uuid": "ee4dd8a9-7f9c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.41.195:52373/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749746, "uuid": "ee72a4b8-7f9c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.115.233:51630/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749819, "uuid": "1a26a48e-7f9d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.18.173:35844/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749867, "uuid": "368e31c2-7f9d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://164.177.177.19:33337/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749872, "uuid": "39977355-7f9d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.236.194.149:58164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727749989, "uuid": "7f893bd7-7f9d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.230.165:47331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727750002, "uuid": "871c5be8-7f9d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.20.182:34642/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727750048, "uuid": "a24bb550-7f9d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.155.233:33519/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727750176, "uuid": "eeff6fc8-7f9d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.131:46969/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727750284, "uuid": "2f755e66-7f9e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.110.200:52782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727750286, "uuid": "302afab9-7f9e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.57.106:46394/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727750288, "uuid": "3180169c-7f9e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.40.200:58198/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727750291, "uuid": "334aae54-7f9e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.201.228:38549/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727750465, "uuid": "9b3f075e-7f9e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.194.203:56521/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727750537, "uuid": "c62343c3-7f9e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.24.104:45797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727750706, "uuid": "2ac5741d-7f9f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.218.24:35102/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727750955, "uuid": "bf207bd4-7f9f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.239.244:56219/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751007, "uuid": "ddd74cb4-7f9f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.121.227:54538/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751007, "uuid": "dde62a3a-7f9f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.226.181:34334/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751066, "uuid": "0115942a-7fa0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.195.106:51514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751138, "uuid": "2c46df92-7fa0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.207.43:39179/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751306, "uuid": "90781d61-7fa0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.57.106:46394/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751319, "uuid": "982d0f0c-7fa0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.170.199:35054/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751425, "uuid": "d7679f35-7fa0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.219.99:50106/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751485, "uuid": "fb06d0b8-7fa0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.230.165:47331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751545, "uuid": "1f0cb9ac-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.230.47:59394/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751607, "uuid": "43e4e9ea-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.15.126:55833/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751612, "uuid": "46cda0ed-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.48.194:49720/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751666, "uuid": "66e00f93-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.194.203:56521/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751676, "uuid": "6ca1dd19-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.240.179:60475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751679, "uuid": "6ec754e1-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.19.151:35433/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751681, "uuid": "701379da-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.20.182:34642/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751730, "uuid": "8d593203-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.65.224:36367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751819, "uuid": "c23481da-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.15.227:51950/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751820, "uuid": "c2b1df99-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.9.199:58327/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751850, "uuid": "d48ae348-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.245.134:34498/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751851, "uuid": "d530fcab-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://197.204.200.176:59260/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751851, "uuid": "d5522196-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.255.45.237:49124/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751851, "uuid": "d56fbd02-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.102.198:60456/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751855, "uuid": "d777fb24-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.115.89.194:47122/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751865, "uuid": "dda8fc98-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.246.80:52831/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751879, "uuid": "e61c48bc-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.87.72.208:57278/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751883, "uuid": "e8268516-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.37.37:33748/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751884, "uuid": "e8b7aeb9-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.254.210:38298/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751884, "uuid": "e8e50c81-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.36.247:35585/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751887, "uuid": "eaaae7eb-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.231.220.174:43056/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751908, "uuid": "f7270418-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.220.162.90:43446/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727751965, "uuid": "19499fc3-7fa2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.236.194.149:58164/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727752028, "uuid": "3e7f5df4-7fa2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.220.196:37903/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727752029, "uuid": "3f5544b3-7fa2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.132:44530/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727752054, "uuid": "4e3dcd3f-7fa2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.238.189.72:41632/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727752087, "uuid": "61c0810d-7fa2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.48.194:49720/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727752335, "uuid": "f5e3148d-7fa2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.229:49305/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727752387, "uuid": "147482bb-7fa3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.131:46969/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727752819, "uuid": "15e886f5-7fa4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.60.42:57477/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727752849, "uuid": "282a20de-7fa4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.126.149:41999/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727752866, "uuid": "31ea30c9-7fa4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.209:40534/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727752986, "uuid": "79fefc09-7fa4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.127.106:49478/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727753047, "uuid": "9df30996-7fa4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.97.172:57773/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727753047, "uuid": "9e0f5e5e-7fa4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.141.111:52408/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727753109, "uuid": "c2bb8aa9-7fa4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.19.151:35433/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727753123, "uuid": "cb20b6c9-7fa4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.18.87:45859/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727753125, "uuid": "cc9e3614-7fa4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.35.234:34109/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727753226, "uuid": "088109e8-7fa5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.25.214:59846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727753226, "uuid": "08ccaa52-7fa5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.82.223:46315/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727753301, "uuid": "358cf6d9-7fa5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.23.1:34757/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727753346, "uuid": "5080dc6d-7fa5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.78.31:35354/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727753469, "uuid": "99591563-7fa5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.32.171:39027/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727753472, "uuid": "9b237ded-7fa5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.80.42:60515/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727753531, "uuid": "be5a67bb-7fa5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.24.34:56451/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727753647, "uuid": "03ac0df1-7fa6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.179.194:53909/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727753708, "uuid": "2806ca20-7fa6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.224.37:48915/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727753828, "uuid": "6fbb180f-7fa6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.251.130:46232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727753902, "uuid": "9bbf084e-7fa6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.21:37206/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754008, "uuid": "dac4a368-7fa6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.91.207.83:59975/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754125, "uuid": "208e00d5-7fa7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.60.42:57477/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754247, "uuid": "6960e324-7fa7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.187.60:51691/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754250, "uuid": "6b5884d7-7fa7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.7.42:57229/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754309, "uuid": "8e19cd8d-7fa7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.208.241:37273/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754425, "uuid": "d360403b-7fa7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.126.149:41999/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754426, "uuid": "d3bd13e4-7fa7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.141.111:52408/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754487, "uuid": "f8686856-7fa7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.125.100:57856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754555, "uuid": "20aa17e3-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.197:33065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754666, "uuid": "62fe2f52-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.103.211:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754786, "uuid": "aa897ff5-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.35.234:34109/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754786, "uuid": "aa915b18-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.220.103:42819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754786, "uuid": "aaaa4528-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.38.150:41555/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754787, "uuid": "ab166727-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.182.83:46231/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754787, "uuid": "ab29ca47-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.59.153.224:52465/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754845, "uuid": "ce0a1e1a-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.18.87:45859/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754846, "uuid": "ce3496d0-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.117.239:39515/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754846, "uuid": "ce87b896-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.49.181:50285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754855, "uuid": "d3ce41d0-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.185.98:47716/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754965, "uuid": "155bd526-7fa9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.82.223:46315/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754979, "uuid": "1d910f0d-7fa9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.134.249:48705/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727754987, "uuid": "22408e49-7fa9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.37:35124/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727755027, "uuid": "39f7f794-7fa9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.187.60:51691/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727755069, "uuid": "534a7b46-7fa9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.30.212:53457/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727755087, "uuid": "5debd74b-7fa9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.135.110:55096/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727755146, "uuid": "80eac374-7fa9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.78.31:35354/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727755348, "uuid": "f9b49165-7fa9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.23.150:35634/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727755446, "uuid": "33e6945d-7faa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.251.130:46232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727755454, "uuid": "3873c59f-7faa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.91.207.83:59975/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727755455, "uuid": "391d7f10-7faa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.79.125:38511/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727755472, "uuid": "4341bcc4-7faa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.141:33562/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727755585, "uuid": "86e0c6c6-7faa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.32.208:54824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727755635, "uuid": "a481ee01-7faa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.145.228:39123/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727755808, "uuid": "0bd813c3-7fab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.81.26.204:38597/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727755865, "uuid": "2dd0f400-7fab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.19.33:38669/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727755944, "uuid": "5cb1ce43-7fab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.120.106:47035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756079, "uuid": "ad177c0e-7fab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.218:57017/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756125, "uuid": "c897ee05-7fab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.60.222:60579/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756165, "uuid": "e0c32522-7fab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.59.153.224:52465/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756166, "uuid": "e1078608-7fab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.139.116:52014/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756170, "uuid": "e37be6ee-7fab-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.177.72:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756226, "uuid": "04fa45ac-7fac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.197:33065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756228, "uuid": "06119676-7fac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.96.15:45786/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756229, "uuid": "0694908f-7fac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.39.104:51965/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756234, "uuid": "0965f29a-7fac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.133.147:35748/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756286, "uuid": "2870f25f-7fac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.116.33.106:46791/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756293, "uuid": "2cb51892-7fac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.181.55:53878/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756349, "uuid": "4e1875d8-7fac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.3.154.218:51662/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756358, "uuid": "53dc242e-7fac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.134.204:40381/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756408, "uuid": "71793873-7fac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.182.83:46231/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756473, "uuid": "982cd13f-7fac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.25.239:56325/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756542, "uuid": "c0f81acb-7fac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.134.249:48705/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756586, "uuid": "db7dd661-7fac-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.107.243:33314/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756653, "uuid": "03220988-7fad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.123.200:38564/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756708, "uuid": "240390aa-7fad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.97.93:44383/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756885, "uuid": "8d6b815a-7fad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.176.192.156:58058/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756903, "uuid": "9881cbae-7fad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.219.98:50742/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756914, "uuid": "9ee1ec26-7fad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.127.241:46511/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756946, "uuid": "b1fe1c7c-7fad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.79.125:38511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756952, "uuid": "b5dc3cc0-7fad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.142.248:45017/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727756959, "uuid": "b9d5695d-7fad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.118.20:48440/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757012, "uuid": "d93667fb-7fad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.45.28:48486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757012, "uuid": "d99bcdb7-7fad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.32.208:54824/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757029, "uuid": "e3cae642-7fad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.117.33:57345/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757069, "uuid": "fb7fd81d-7fad-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.197.92:57804/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757079, "uuid": "0174f6dd-7fae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.15.206:37154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757247, "uuid": "6566a966-7fae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.232.153:38968/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757247, "uuid": "65864ede-7fae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.75.131:37862/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757309, "uuid": "8a231af9-7fae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.23.150:35634/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757368, "uuid": "adc02e62-7fae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.3.156:59896/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757382, "uuid": "b632e5f2-7fae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.118.80:36768/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757441, "uuid": "d9026d58-7fae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.145.228:39123/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757485, "uuid": "f37541dc-7fae-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.96.15:45786/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757546, "uuid": "17ab1104-7faf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.157.12.50:36789/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757546, "uuid": "17ed5338-7faf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.128.254:47616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757612, "uuid": "3eedd8e4-7faf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.216.40.246:37352/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757730, "uuid": "8555536a-7faf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.44.247:38143/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757848, "uuid": "cbee1c75-7faf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.33.47:41013/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757966, "uuid": "120ea8d1-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.109.152:40511/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727757966, "uuid": "120f4291-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.20.143:36049/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758026, "uuid": "35b6dc6e-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.178.82:43746/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758086, "uuid": "5946bff3-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.95:36458/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758146, "uuid": "7d294383-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.80.196:48146/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758206, "uuid": "a0e38cdd-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.255.122.133/uploads/trr22.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758206, "uuid": "a0ef26ed-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.255.122.133/uploads/il11.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758206, "uuid": "a0fa1b5d-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.255.122.133/uploads/il22.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758206, "uuid": "a123c5fe-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.255.122.133/uploads/trr14.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758206, "uuid": "a1400d18-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalsteptogo.com/uploads/trr10.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758206, "uuid": "a151d065-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.255.122.133/uploads/il33.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758206, "uuid": "a1524230-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.255.122.133/uploads/trr9.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758207, "uuid": "a15fc90d-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalsteptogo.com/uploads/trr21.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758207, "uuid": "a17b676f-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.255.122.133/uploads/pnk22.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758208, "uuid": "a1fad3b0-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/tera111.ip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758208, "uuid": "a2455049-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.255.122.133/uploads/il44.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758214, "uuid": "a5f59c48-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.249.208.143/sostener.vbs", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "a63f1a4d-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.123.200:38564/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "a643b92c-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.107.243:33314/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "a653b5fb-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.234.146:36138/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "a68fc5a4-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.15/hiddenbin/boatnet.mips", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "a697962f-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.15/hiddenbin/boatnet.mpsl", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "a69b03ad-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.15/hiddenbin/boatnet.sh4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "a69fbbe8-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.255.122.133/uploads/trr3.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "a6ad272d-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.15/hiddenbin/boatnet.m68k", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758215, "uuid": "a6b9c566-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.15/hiddenbin/boatnet.ppc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758216, "uuid": "a6be569f-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.15/ohshit.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758216, "uuid": "a6d37549-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.15/hiddenbin/boatnet.x86", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758216, "uuid": "a6d54223-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.15/hiddenbin/boatnet.arc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758216, "uuid": "a6e52417-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.255.122.133/uploads/pnk33.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758216, "uuid": "a704f68f-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.15/hiddenbin/boatnet.arm6", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758216, "uuid": "a715c28e-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.15/hiddenbin/boatnet.spc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758217, "uuid": "a7582851-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.15/hiddenbin/boatnet.arm", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758217, "uuid": "a7bc6cd6-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.202.233.169/Tak/Reg/Marz/DRG/RTC/F3dll.txt", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758217, "uuid": "a7c23e1f-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.15/hiddenbin/boatnet.x86_64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758217, "uuid": "a7c71e3f-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/tera21.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758218, "uuid": "a83a7dda-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.255.122.133/uploads/pnk11.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758218, "uuid": "a86c0099-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.255.122.133/uploads/tera21.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758220, "uuid": "a99a5805-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/tera22.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758220, "uuid": "a99f4c6e-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.255.122.133/uploads/il22.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758223, "uuid": "ab5faf3a-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.255.122.133/uploads/tera22.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758227, "uuid": "adb4ecfe-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.255.122.133/uploads/il11.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758230, "uuid": "af8dcfe1-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.255.122.133/uploads/pnk33.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758234, "uuid": "b180017e-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.255.122.133/uploads/il33.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758235, "uuid": "b29f875c-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.255.122.133/uploads/pnk22.zip", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758239, "uuid": "b48f049f-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.255.122.133/uploads/il44.zip", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758244, "uuid": "b7824631-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://128.65.199.135/Doc.exe", "Tag": [ { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758250, "uuid": "bb0ba3d6-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.255.122.133/uploads/pnk11.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758250, "uuid": "bb660e97-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/pnk22.zip", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758263, "uuid": "c34fd088-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.7.28/botnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758263, "uuid": "c34fd894-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.7.28/botnet.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758264, "uuid": "c357dc30-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.7.28/botnet.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758264, "uuid": "c37ee457-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.7.28/botnet.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758264, "uuid": "c3817c60-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.7.28/bonet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758264, "uuid": "c3ac25ff-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/trr22.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758264, "uuid": "c3b85522-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/il11.txt", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758264, "uuid": "c3bcd0b4-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalsteptogo.com/uploads/pnk22.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758264, "uuid": "c3d3282e-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/il22.txt", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758265, "uuid": "c4000a56-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalsteptogo.com/uploads/trr14.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758265, "uuid": "c401dc2c-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalsteptogo.com/uploads/trr3.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758265, "uuid": "c40bdaa3-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalsteptogo.com/uploads/il11.txt", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758265, "uuid": "c4102662-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/il33.txt", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758265, "uuid": "c413669d-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalsteptogo.com/uploads/trr22.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758265, "uuid": "c41a4422-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalsteptogo.com/uploads/il22.txt", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758265, "uuid": "c4234775-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/trr21.txt", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758266, "uuid": "c4ac766c-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalsteptogo.com/uploads/il44.txt", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758266, "uuid": "c4ee3686-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalsteptogo.com/uploads/trr9.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758266, "uuid": "c505f239-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalsteptogo.com/uploads/il33.txt", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758266, "uuid": "c5130192-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/pnk22.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758266, "uuid": "c51f91ed-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/il44.txt", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758267, "uuid": "c54b5024-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.7.28/botnet.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758268, "uuid": "c5ee4fa0-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/trr9.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758268, "uuid": "c60c5920-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/trr14.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758268, "uuid": "c64fcbaa-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.127.241:46511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "c67582b4-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/trr3.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "c67f8da9-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/pnk33.txt", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "c68437e0-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalsteptogo.com/uploads/pnk11.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "c6c48502-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.7.28/botnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "c6c4ca96-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.7.28/botnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "c6c606c7-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.7.28/botnet.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "c6c90d80-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.15/hiddenbin/boatnet.arm7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "c6ca17a5-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalsteptogo.com/uploads/pnk33.txt", "Tag": [ { "name": "downloader", "colour": "#9d9bda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758269, "uuid": "c6ddac63-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.7.28/botnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758270, "uuid": "c6ec3e85-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.232/main_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758270, "uuid": "c6ef47aa-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.7.28/botnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758270, "uuid": "c70eeee4-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/trr10.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758270, "uuid": "c711c33d-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.142.107.15/hiddenbin/boatnet.arm5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758270, "uuid": "c71ba9bc-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.7.28/botnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758270, "uuid": "c7203c9d-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.7.28/botnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758271, "uuid": "c78eb6e6-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.7.28/botnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758271, "uuid": "c78f73dc-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.7.28/botnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758271, "uuid": "c80a1895-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.7.28/payload.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758274, "uuid": "c95de566-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/pnk11.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758275, "uuid": "ca130756-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.17.197:43917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758276, "uuid": "cab41f01-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalsteptogo.com/uploads/il22.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758279, "uuid": "cc9a1eb5-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/il22.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758280, "uuid": "cd0a0be4-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/il11.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758280, "uuid": "cd635db1-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalsteptogo.com/uploads/il11.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758285, "uuid": "d056a1f5-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/pnk33.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758286, "uuid": "d0b48dc1-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalsteptogo.com/uploads/pnk33.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758290, "uuid": "d2ece504-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/il44.zip", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758290, "uuid": "d2eceb1b-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalstepgo.com/uploads/il33.zip", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758290, "uuid": "d35750c9-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalsteptogo.com/uploads/il44.zip", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758291, "uuid": "d37240b7-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalsteptogo.com/uploads/il33.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758296, "uuid": "d672f263-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.118.20:48440/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "e9e408c5-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.232/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "e9ed7263-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.232/main_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "e9ed8759-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.232/main_mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "e9fcfb87-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.232/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "e9fd3aca-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.232/main_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "ea0e8430-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.232/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "ea0eadb7-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.232/main_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "ea0ebd10-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.232/main_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758328, "uuid": "ea10c21f-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.249.232/main_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758329, "uuid": "ea18e983-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.149.87.69/le/la.bot.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758329, "uuid": "ea18f495-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.149.87.69/le/la.bot.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758329, "uuid": "ea18f914-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.149.87.69/le/la.bot.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758329, "uuid": "ea197de3-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.149.87.69/le/la.bot.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758329, "uuid": "ea19a2a6-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.149.87.69/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758329, "uuid": "ea24e977-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.149.87.69/le/la.bot.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758329, "uuid": "ea2500a9-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.149.87.69/le/la.bot.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758329, "uuid": "ea25705c-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.149.87.69/le/la.bot.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758329, "uuid": "ea263974-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.149.87.69/le/la.bot.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758329, "uuid": "ea265bd8-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.149.87.69/le/la.bot.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758329, "uuid": "ea2682de-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.149.87.69/le/la.bot.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758446, "uuid": "302083c4-7fb1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.116.33.106:46791/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758506, "uuid": "5426dee4-7fb1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.49.96:46286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758540, "uuid": "67e2c7ec-7fb1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.58.39:34481/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758566, "uuid": "7775bfac-7fb1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.15.206:37154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758626, "uuid": "9b2f5d9e-7fb1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.197.92:57804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758719, "uuid": "d2cabe31-7fb1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.120.4:47464/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758808, "uuid": "0819e977-7fb2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.175.247:48808/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758866, "uuid": "2a622dd9-7fb2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.74.208:32963/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758931, "uuid": "51747180-7fb2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.180.252:41169/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758936, "uuid": "53f0fa63-7fb2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.245.250:37120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758986, "uuid": "72128d84-7fb2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.44.247:38143/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727758999, "uuid": "79bb42b5-7fb2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.135.240:33666/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759051, "uuid": "98a00218-7fb2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.92.127:43194/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759107, "uuid": "ba58d4fe-7fb2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.3.156:59896/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759167, "uuid": "ddb0751d-7fb2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.57.82:56029/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759226, "uuid": "00c49c7c-7fb3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.128.254:47616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759346, "uuid": "4890123a-7fb3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.105.164.86/fb31c18012444fcf/softokn3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759346, "uuid": "489108d3-7fb3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.105.164.86/fb31c18012444fcf/msvcp140.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759347, "uuid": "48f1a966-7fb3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.105.164.86/fb31c18012444fcf/sqlite3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759347, "uuid": "49656606-7fb3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.105.164.86/fb31c18012444fcf/nss3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759348, "uuid": "4991b751-7fb3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.105.164.86/fb31c18012444fcf/vcruntime140.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759348, "uuid": "49a50d81-7fb3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.105.164.86/fb31c18012444fcf/mozglue.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759350, "uuid": "4aad7c02-7fb3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.105.164.86/fb31c18012444fcf/freebl3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759585, "uuid": "d7042e82-7fb3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.95.106:37724/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759646, "uuid": "fb3fc24a-7fb3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.244.37:50363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759707, "uuid": "1f918835-7fb4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.20.143:36049/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759707, "uuid": "1fa4ab85-7fb4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.40.95:38017/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759766, "uuid": "432967ca-7fb4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.95:36458/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759886, "uuid": "8a9ea64c-7fb4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/ldms/66fb253552d8d_sdhgdfsd.exe", "Tag": [ { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759886, "uuid": "8a9ea7fc-7fb4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/malesa/66fad513a308f_SubstituteAgain.exe", "Tag": [ { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759886, "uuid": "8a9ec0d8-7fb4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/yuop/66f8672c1ff0d_lyla3334.exe", "Tag": [ { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759886, "uuid": "8ab2ce6f-7fb4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/ldms/66fb287b4e6d5_vdfsgfd.exe", "Tag": [ { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759887, "uuid": "8aefdd81-7fb4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/ldms/66fb287e42db8_vfdsg15.exe", "Tag": [ { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759887, "uuid": "8aefe1e1-7fb4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/prog/66f55533ca7d6_RDPWInst.exe", "Tag": [ { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759945, "uuid": "ad795a96-7fb4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/ldms/66fb2538369cb_EdgeUpdater.exe", "Tag": [ { "name": "exer", "colour": "#16a6ea", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759946, "uuid": "adfa5fa3-7fb4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.10.127:48732/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759946, "uuid": "ae220af4-7fb4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.188.126:33433/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727759948, "uuid": "af679c56-7fb4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.17.231.9:60329/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760008, "uuid": "d32400b9-7fb4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.120.4:47464/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760125, "uuid": "189a19fc-7fb5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.90.234:48120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760205, "uuid": "48bbc7fa-7fb5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.220.167.207:51516/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760250, "uuid": "63a8656c-7fb5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.161.24:35343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760280, "uuid": "75176d69-7fb5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.58.39:34481/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760311, "uuid": "87b133f6-7fb5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.171.190:35814/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760312, "uuid": "888904ff-7fb5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.230.211:56463/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760425, "uuid": "cba4d79c-7fb5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.74.208:32963/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760485, "uuid": "efbb4ae3-7fb5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.135.240:33666/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760487, "uuid": "f0828480-7fb5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.92.127:43194/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760487, "uuid": "f0bc7694-7fb5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.48.62:57756/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760612, "uuid": "3b00fa30-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.245.250:37120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760612, "uuid": "3b618001-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://himb.shades.whatisaweekend.com/orderReview", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760616, "uuid": "3dc63f62-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://down.lianfamedical.com/out.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760666, "uuid": "5b5fa6ea-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.210.215.11/zoom/wps.vbs", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760667, "uuid": "5bce49ac-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.210.215.11/zoom/kixx.js", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760668, "uuid": "5c548b19-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.175.247:48808/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760668, "uuid": "5c86fcd8-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.210.215.11/zoom/cc.js", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760785, "uuid": "a2027df2-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.57/sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760786, "uuid": "a30859a7-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.169.185:57205/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760845, "uuid": "c6178da5-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.219.99:50106/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760857, "uuid": "cd6f8363-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.126.166:41475/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727760965, "uuid": "0db67d0a-7fb7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.5.79:33217/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761031, "uuid": "34d339b7-7fb7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.56.4:53242/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761265, "uuid": "c0811c0e-7fb7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.95.106:37724/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761279, "uuid": "c8789629-7fb7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.55.108:55452/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761567, "uuid": "74337fe9-7fb8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.187.26:57553/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761626, "uuid": "974b7575-7fb8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.19.177.44/xampp/ui/IEnetsatwithnewthingstobeonline.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761626, "uuid": "977195a1-7fb8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.19.177.44/20/gb/ienetworkupdateshere.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761686, "uuid": "bb718544-7fb8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.19.177.44/90/dllhost.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761746, "uuid": "df245e94-7fb8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.208.186:36221/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761754, "uuid": "e3f8bff1-7fb8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.131.67:51016/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761808, "uuid": "041f1fcf-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.220.167.207:51516/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761810, "uuid": "04facc3c-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1mVvsIVW7-x9DjCo7uv1ZOoZtTNzVEFB5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761812, "uuid": "0661773f-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=17Ed0BzToN3ez5R1ZegL6CXKwX1COgAju", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761822, "uuid": "0c7c9792-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.33.54:54672/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761865, "uuid": "264650a1-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.229.255:44815/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761868, "uuid": "27d118eb-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=16KUqaQ_X6zbBHAGNnsewuswUAZxtxGv7", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761868, "uuid": "27def067-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1ZdybZY4WrMwYKbuTlGVANt9wXhqlWSBc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761868, "uuid": "27f5aec9-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=16BcB-CnWtRtHDq7UA6aD9a4cHD2R7_Ck", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761868, "uuid": "27fb4297-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=196IYHEN42PTEDpTMlvc3osZSDWP6_3Rd", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761927, "uuid": "4b1a9f09-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1WV4yC4jy06NPBMZa4UByVclKHGEcIK_f", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761928, "uuid": "4b712c68-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1E22hSDRfLSpLThmHE9wjUGQc-tb9axJL", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761928, "uuid": "4b945785-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://menyos.com/assets/home/js/bdg/food.exe", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761985, "uuid": "6d7dbca3-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.89.249:56744/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727761987, "uuid": "6e892d6f-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.174.77:40526/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762046, "uuid": "91b7523f-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.171.190:35814/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762089, "uuid": "aba10102-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.153:57312/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762168, "uuid": "da6005b8-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.148.113/2a5dc88bed850cdd/softokn3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762168, "uuid": "da611d28-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.148.113/2a5dc88bed850cdd/freebl3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762168, "uuid": "da611e9a-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.148.113/2a5dc88bed850cdd/sqlite3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762168, "uuid": "da626595-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.148.113/2a5dc88bed850cdd/msvcp140.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762168, "uuid": "da7ef040-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.148.113/2a5dc88bed850cdd/nss3.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762171, "uuid": "dc5d3007-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.148.113/2a5dc88bed850cdd/mozglue.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762171, "uuid": "dc771348-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.200.148.113/2a5dc88bed850cdd/vcruntime140.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762177, "uuid": "dfc99725-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.62.242:34641/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762226, "uuid": "fd1ce667-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.159.112:38073/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762465, "uuid": "8bdd3832-7fba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.157.12.50:36789/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762494, "uuid": "9cbe8d89-7fba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.117.254:37222/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762586, "uuid": "d39342c1-7fba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.93.209:46557/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762586, "uuid": "d3b6adbe-7fba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.5.79:33217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762591, "uuid": "d68b8d09-7fba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.222.158:37698/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762619, "uuid": "e7357cd3-7fba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.87.119.184:41810/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762619, "uuid": "e73c802d-7fba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.118.209:52484/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762619, "uuid": "e78a2fde-7fba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.91.63:49442/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762651, "uuid": "fa578e28-7fba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.148.109.31:46604/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762651, "uuid": "fa785cab-7fba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.88.3.26:41185/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762651, "uuid": "faa5ab31-7fba-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.216.15:51210/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762663, "uuid": "01ab11aa-7fbb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.18.191:59117/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762665, "uuid": "028b7a14-7fbb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.15.254.166:53039/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762665, "uuid": "02eb9a04-7fbb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.121:43212/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727762674, "uuid": "07ed2aed-7fbb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.145.73:50658/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727763127, "uuid": "1679fdc7-7fbc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.183.7:48986/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727763160, "uuid": "2a18d0b0-7fbc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.121.22:55463/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727763186, "uuid": "392bf30f-7fbc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.252.25:49005/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727763190, "uuid": "3b8b6133-7fbc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.24.63:57026/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727763485, "uuid": "eb753167-7fbc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.55.108:55452/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727763489, "uuid": "ee049fb8-7fbc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.109.179:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727763546, "uuid": "0fca5bfb-7fbd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.133.67.10:48716/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727763553, "uuid": "14507c19-7fbd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.180.79.87:49955/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727763555, "uuid": "155a6f1e-7fbd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.77.200:35861/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727763608, "uuid": "34a96a90-7fbd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.174.77:40526/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727763672, "uuid": "5b110ff6-7fbd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.132.226:51987/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727763727, "uuid": "7ba0df76-7fbd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.208.186:36221/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727763787, "uuid": "9f5af08e-7fbd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.143.156:40566/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727763847, "uuid": "c3507cb6-7fbd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.180.88:54934/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727763851, "uuid": "c5c8fe2c-7fbd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.218.92:50912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727763906, "uuid": "e6b4599d-7fbd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.62.242:34641/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727764026, "uuid": "2e1cd265-7fbe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.4.249:54002/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727764211, "uuid": "9c499c96-7fbe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.114.163.238/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727764211, "uuid": "9c5135e3-7fbe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.114.163.238/hiddenbin/boatnet.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727764328, "uuid": "e247efbb-7fbe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.70.31.111:45492/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727764577, "uuid": "76436145-7fbf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.103.61:45518/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727764686, "uuid": "b7b16e88-7fbf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.57.16:52057/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727764687, "uuid": "b7cf5f89-7fbf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.252.25:49005/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727764687, "uuid": "b81477d5-7fbf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.172.72:37231/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727764690, "uuid": "b9bd4582-7fbf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.83.59:40126/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727764745, "uuid": "dae56ab1-7fbf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.121.22:55463/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727764757, "uuid": "e1fd2356-7fbf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.114.172:41691/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727764868, "uuid": "242333a6-7fc0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.126.27:45209/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727764930, "uuid": "48c415f4-7fc0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.204.246:56460/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727765108, "uuid": "b3035bc0-7fc0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.101.98:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727765109, "uuid": "b35f4584-7fc0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.13.185:39153/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727765171, "uuid": "d849f61a-7fc0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.244.103:59343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727765346, "uuid": "40b3b2f8-7fc1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.132.226:51987/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727765469, "uuid": "8a026b36-7fc1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.108.145:58120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727765528, "uuid": "ad098df2-7fc1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.121.4:47328/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727765535, "uuid": "b14b7910-7fc1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.187.201:51142/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727765599, "uuid": "d75c7390-7fc1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.180:38548/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727765646, "uuid": "f3d77b6b-7fc1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.103.196:55245/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727765765, "uuid": "3aaff70d-7fc2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.115.73:41380/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727765766, "uuid": "3b096dcc-7fc2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.143.156:40566/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727765826, "uuid": "5f1df812-7fc2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.253.21:39592/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727765835, "uuid": "643924a0-7fc2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.146.182:42185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727765885, "uuid": "82251015-7fc2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.104.199:59414/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727766071, "uuid": "f0bcd05a-7fc2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.134.211:35303/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727766126, "uuid": "119cc72c-7fc3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.83.59:40126/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727766130, "uuid": "14424208-7fc3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.159.2:59094/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727766264, "uuid": "641c66cb-7fc3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.217.39:54380/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727766366, "uuid": "a0b65684-7fc3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.214.107:60114/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727766377, "uuid": "a749a9cc-7fc3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.123.38:52614/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727766425, "uuid": "c3bc6567-7fc3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.24.63:57026/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727766550, "uuid": "0e9d5155-7fc4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.178.187:48225/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727766670, "uuid": "55bbfa8d-7fc4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.213.146:34455/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727766671, "uuid": "5693a75d-7fc4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.20.121:34595/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727766975, "uuid": "0bacb873-7fc5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.231.41:38954/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727767145, "uuid": "70d4c9aa-7fc5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.193.215.104:56562/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727767160, "uuid": "79eeb6c4-7fc5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.69.18:44368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727767326, "uuid": "dcd1f49c-7fc5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.187.201:51142/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727767326, "uuid": "dd06088c-7fc5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.204.246:56460/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727767328, "uuid": "de707952-7fc5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.158.118:33504/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727767329, "uuid": "ded02cd1-7fc5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.13.101:51611/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727767385, "uuid": "000b650a-7fc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.54.92.74:52934/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727767446, "uuid": "2463e294-7fc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.214.107:60114/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727767568, "uuid": "6d6b7b0c-7fc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.61.208:42674/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727767570, "uuid": "6e448d0f-7fc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.229.41:48712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727767625, "uuid": "8f2d240c-7fc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.134.211:35303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727767745, "uuid": "d6aaf208-7fc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.248.12.179:46526/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727767746, "uuid": "d74c6887-7fc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.171.187:60121/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727767747, "uuid": "d8220472-7fc6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.55.245:34582/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727767927, "uuid": "4325f2fd-7fc7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.213.146:34455/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727767928, "uuid": "43a2198f-7fc7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.148.239:39384/bin.sh", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727767987, "uuid": "66be5633-7fc7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.178.187:48225/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727767987, "uuid": "670040ae-7fc7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.167.172:42285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727768165, "uuid": "d13e8d7d-7fc7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.137.31:58324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727768225, "uuid": "f491d7d8-7fc7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.159.2:59094/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727768226, "uuid": "f56e1173-7fc7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.112.6:50167/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727768285, "uuid": "18b1adeb-7fc8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.183.53.178:50316/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727768313, "uuid": "296df76c-7fc8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.4.249:54002/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727768407, "uuid": "61317a6a-7fc8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.47.117:34323/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727768466, "uuid": "846808c3-7fc8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.17.14:40486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727768834, "uuid": "5fd1c5ae-7fc9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.220:41416/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727768947, "uuid": "a31b01e8-7fc9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.137.81:60495/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727769066, "uuid": "ea44ab8d-7fc9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.219.56:36767/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727769066, "uuid": "ea6c1275-7fc9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.235.12.45:3892/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727769073, "uuid": "ee22e97e-7fc9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.55.245:34582/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727769131, "uuid": "110fb49f-7fca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.2.135.171:52612/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727769185, "uuid": "3127dfab-7fca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.99.64:48050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727769265, "uuid": "60bd61bc-7fca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.42:33348/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727769307, "uuid": "79cbc039-7fca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.114.172:41691/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727769366, "uuid": "9cf70c6a-7fca-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.137.31:58324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727769614, "uuid": "30c1abb8-7fcb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.75.160.111:43486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727769772, "uuid": "8f04faca-7fcb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.39.159:51599/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727769785, "uuid": "96ae6245-7fcb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.90.234:48120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727770025, "uuid": "25912ce9-7fcc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.54.92.74:52934/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727770086, "uuid": "49de2b9f-7fcc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.80.196:48146/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727770385, "uuid": "fc4ed2f5-7fcc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.235.12.45:3892/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727770386, "uuid": "fcb54bf1-7fcc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.17.14:40486/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727770508, "uuid": "4571347f-7fcd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.74.38:41403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727770518, "uuid": "4b6e99de-7fcd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.103.130:49457/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727770626, "uuid": "8c371f04-7fcd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.137.81:60495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727770746, "uuid": "d3ab24ae-7fcd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.203.106:33466/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727770746, "uuid": "d3c272d3-7fcd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.210.41:44126/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727770751, "uuid": "d66e6644-7fcd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.102.12:47022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727770752, "uuid": "d6fd9504-7fcd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.9.34:38781/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727770818, "uuid": "fe4b4267-7fcd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.107.89.158:32843/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727770864, "uuid": "19a465b3-7fce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.65/x-8-6", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727770864, "uuid": "19e608b4-7fce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.193.20:47659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727770866, "uuid": "1b071426-7fce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.50.57.143:48221/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727771045, "uuid": "85faf25d-7fce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.75.160.111:43486/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727771108, "uuid": "ab2d22c3-7fce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.220:41416/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727771243, "uuid": "fb7a1f0c-7fce-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.1.193:49247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727771286, "uuid": "15567749-7fcf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.171.187:60121/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727771288, "uuid": "1646b471-7fcf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.39.159:51599/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727771300, "uuid": "1d731a99-7fcf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.89.30:46570/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727771472, "uuid": "83f338a5-7fcf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.208.138.224:52819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727771484, "uuid": "8ba07cea-7fcf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.26.45:41278/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727771659, "uuid": "f3e6447d-7fcf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.207.29:58686/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727771711, "uuid": "12803e47-7fd0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.112.6:50167/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727771772, "uuid": "374115e7-7fd0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.108.161:47294/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727771945, "uuid": "9e6655fd-7fd0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.155.223.162:60552/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727771962, "uuid": "a8314bc0-7fd0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.19.191:55671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727771963, "uuid": "a8989a95-7fd0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.155:34423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727772007, "uuid": "c330d07f-7fd0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.89.249:56744/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727772246, "uuid": "5167c87b-7fd1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.103.130:49457/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727772368, "uuid": "9a0d4d98-7fd1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.33.54:54672/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727772546, "uuid": "0438cc4e-7fd2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.7.243:52075/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727772547, "uuid": "04d04270-7fd2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.203.137.175:60960/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727772608, "uuid": "296c7a8a-7fd2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.180.244:41408/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727772667, "uuid": "4c462590-7fd2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.50.57.143:48221/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727772785, "uuid": "92f726d0-7fd2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.159.112:38073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727772786, "uuid": "936843c0-7fd2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.140.136:57982/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727772845, "uuid": "b6decb6a-7fd2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.207.46:39613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773044, "uuid": "2d544313-7fd3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.24.22:44636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773147, "uuid": "6a8edeee-7fd3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.208.138.224:52819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773267, "uuid": "b2232df9-7fd3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.174.180:57099/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773271, "uuid": "b48e0500-7fd3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.118.87:37238/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773279, "uuid": "b976c41f-7fd3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.147.95:57381/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773446, "uuid": "1c928529-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.152.243:40660/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773447, "uuid": "1d448216-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.39.12:34156/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773447, "uuid": "1d9f5db3-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.25.235:55971/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773447, "uuid": "1d9fe399-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.155.88.94:47610/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773449, "uuid": "1e63cb37-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.16.36:58939/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773452, "uuid": "205f977b-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.239.61:42647/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773457, "uuid": "23150f61-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.170.201.227:50630/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773459, "uuid": "244996e4-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.158.158.182:54948/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773462, "uuid": "26277991-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.6.150:56333/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773467, "uuid": "293a5921-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.129.51:44831/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773468, "uuid": "29f6a8e8-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.187.222:59870/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773478, "uuid": "2fa71673-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.158.158.21:46751/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773480, "uuid": "312ba029-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.112.100.185:51320/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773480, "uuid": "314b6e23-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.94.34.83:47093/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773481, "uuid": "3173b0a1-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.198.11:58602/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773481, "uuid": "31a52020-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.117.117:51910/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773483, "uuid": "33186ad9-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.33.36.151:60686/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773484, "uuid": "33505791-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.33.137.57:47867/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773705, "uuid": "b70aadd9-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.138.15:52122/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773808, "uuid": "f460800f-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.140.136:57982/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773813, "uuid": "f7aec7da-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.181.146.216:45085/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727773985, "uuid": "5deb159c-7fd5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.8.16:54258/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727774170, "uuid": "cc33fdca-7fd5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.82.238:41966/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727774238, "uuid": "f4e5d172-7fd5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.8.22:60797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727774287, "uuid": "1252f688-7fd6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.103.166:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727774345, "uuid": "34f333f8-7fd6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.107.89.158:32843/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727774346, "uuid": "3534a961-7fd6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.123.38:52614/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727774346, "uuid": "35352a35-7fd6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.183.247:52331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727774427, "uuid": "65b2a648-7fd6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.179.216:46915/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727774466, "uuid": "7c9a0b44-7fd6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.206.6:47048/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727774525, "uuid": "a0258249-7fd6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.218.92:50912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727774525, "uuid": "a02f782c-7fd6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.118.87:37238/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727774650, "uuid": "eaad1a80-7fd6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.52.226:35611/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727774765, "uuid": "2f1f01f4-7fd7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.138.15:52122/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727774766, "uuid": "2f6ce903-7fd7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.174.180:57099/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727774825, "uuid": "53061f8d-7fd7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.220.162.38:53293/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727775068, "uuid": "e38b543c-7fd7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.98.185:48959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727775248, "uuid": "4ea6c27e-7fd8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.244.187:42514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727775322, "uuid": "7adc96c8-7fd8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.237.134.67:43513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727775425, "uuid": "b86ffab4-7fd8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.66.96:48718/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727775726, "uuid": "6be8a430-7fd9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.8.22:60797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727775792, "uuid": "92e766b5-7fd9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.131.112:39131/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727775801, "uuid": "989d78b7-7fd9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.180:38548/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727775846, "uuid": "b33a0763-7fd9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.206.6:47048/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727775965, "uuid": "fa203d7e-7fd9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.176.217:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727775978, "uuid": "0218ea3c-7fda-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.28.167:55321/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727776086, "uuid": "422dba4f-7fda-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.78.39.109:53830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727776145, "uuid": "65d4a1b9-7fda-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.52.226:35611/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727776146, "uuid": "6640d55b-7fda-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.87.129.195:60061/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727776210, "uuid": "8c94a77e-7fda-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.4.9:58007/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727776329, "uuid": "d36be56b-7fda-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.205.192.240:34616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727776388, "uuid": "f69023ce-7fda-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.109.228:41711/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727776687, "uuid": "a89780fc-7fdb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.96.206:55925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727776811, "uuid": "f2c8b9bc-7fdb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.98.185:48959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727776812, "uuid": "f2ea3208-7fdb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.78.28:39864/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727776881, "uuid": "1c844317-7fdc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.187.231:51714/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727776926, "uuid": "36e0696d-7fdc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.66.96:48718/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727776942, "uuid": "405c3b95-7fdc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.76.161:60444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727777046, "uuid": "7edc1833-7fdc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.91.23:46936/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727777165, "uuid": "c58710fa-7fdc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.237.134.67:43513/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727777286, "uuid": "0d872de7-7fdd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.4.9:58007/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727777287, "uuid": "0e146419-7fdd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.29.34:59137/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727777419, "uuid": "5cd7cf3a-7fdd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.18.254:52501/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727777470, "uuid": "7b64ee34-7fdd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.23.151:57105/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727777531, "uuid": "9fbef600-7fdd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.97.140:59085/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727777586, "uuid": "c060abd4-7fdd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.244.187:42514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727777650, "uuid": "e6cacc5a-7fdd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.237.58:34294/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727777708, "uuid": "08f0b62e-7fde-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.181.146.216:45085/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727777831, "uuid": "52651bfc-7fde-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.138.146:33486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727777955, "uuid": "9c419d27-7fde-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.101.161:51251/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727778067, "uuid": "df13e3fa-7fde-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.78.28:39864/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727778126, "uuid": "0212882f-7fdf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.78.39.109:53830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727778311, "uuid": "70bfb736-7fdf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.6.53:35185/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727778430, "uuid": "b74d7987-7fdf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.188.44:33610/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727778486, "uuid": "d91ee19e-7fdf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.76.161:60444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727778490, "uuid": "db368b14-7fdf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.32.255:53833/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727778546, "uuid": "fcae1736-7fdf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.72.217:51642/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727778546, "uuid": "fcba4605-7fdf-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.97.140:59085/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727778856, "uuid": "b56476cf-7fe0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.5.37:58799/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727778856, "uuid": "b564771d-7fe0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.69:50244/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727778908, "uuid": "d4b3443d-7fe0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.23.151:57105/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727778982, "uuid": "007008bf-7fe1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.221.137:36496/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727779085, "uuid": "3dd0cdbc-7fe1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.237.58:34294/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727779326, "uuid": "cd957741-7fe1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.42.89:45152/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727779446, "uuid": "14ce9586-7fe2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.138.146:33486/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727779459, "uuid": "1cdb4835-7fe2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.241.189:37037/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727779507, "uuid": "39863cc4-7fe2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.57.16:52057/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727779625, "uuid": "8002ee40-7fe2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.102.154:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727779695, "uuid": "a9812179-7fe2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.35.197:56119/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727779761, "uuid": "d0fd4fea-7fe2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.234:59985/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727779823, "uuid": "f5e5b6a4-7fe2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.110.186:52359/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727780045, "uuid": "7a5fe936-7fe3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.229.134.127:41291/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727780169, "uuid": "c3e405e4-7fe3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.159.108:57959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727780286, "uuid": "0a0d1026-7fe4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.90.79:57286/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727780467, "uuid": "75b765dd-7fe4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.187.231:51714/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727780951, "uuid": "95f48ec2-7fe5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.156.30.10:56120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727781090, "uuid": "e8cf24a0-7fe5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.13.25:57307/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727781264, "uuid": "50878644-7fe6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.91.108:55843/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727781307, "uuid": "6a541e84-7fe6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.109.164:51643/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727781427, "uuid": "b1c9404b-7fe6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.42.89:45152/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727781548, "uuid": "fa231cbc-7fe6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.238.49:48141/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727781551, "uuid": "fbc02d6d-7fe6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.98.186:34041/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727781846, "uuid": "ab56faac-7fe7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.229.134.127:41291/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782146, "uuid": "5e1fd0fa-7fe8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.120.149:56641/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782146, "uuid": "5e7dd5e1-7fe8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.126.128:44540/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782268, "uuid": "a72259b0-7fe8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.159.108:57959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782327, "uuid": "ca1de54a-7fe8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.109.164:51643/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782388, "uuid": "ee6a95be-7fe8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.114.64:52996/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782508, "uuid": "3642f684-7fe9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.134.175:56793/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782565, "uuid": "58599310-7fe9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.236.65.149:43864/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782566, "uuid": "588a1a56-7fe9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.156.30.10:56120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782629, "uuid": "7e972443-7fe9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.73.128:46891/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782746, "uuid": "c441631c-7fe9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.119.215:42095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782808, "uuid": "e8b4f5cc-7fe9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.122.199:48201/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782866, "uuid": "0b989a27-7fea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.150.86:45454/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782925, "uuid": "2effb900-7fea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.238.49:48141/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727782989, "uuid": "54b75d06-7fea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.13.25:57307/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783225, "uuid": "e1b5abb2-7fea-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.103.201:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783350, "uuid": "2c2b12b6-7feb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.238.249:56023/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783350, "uuid": "2c5211fe-7feb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.236.65.149:43864/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783351, "uuid": "2c9f8cf7-7feb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.50.104:48606/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783358, "uuid": "30b875b7-7feb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.239.100:48758/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783407, "uuid": "4de246e9-7feb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.122/arm5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783407, "uuid": "4df6a746-7feb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.122/mpsl", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783407, "uuid": "4e00e795-7feb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.122/x86", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783465, "uuid": "70891277-7feb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.122/mips", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783467, "uuid": "71a4a68b-7feb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.89.76:35434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783524, "uuid": "93e57abb-7feb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.11.122/arm4", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783587, "uuid": "b92f5343-7feb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.160.7:33800/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783646, "uuid": "dc3657c6-7feb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.73.128:46891/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783825, "uuid": "473d5a26-7fec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.120.149:56641/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783840, "uuid": "4fee0f51-7fec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.197.138:50777/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783886, "uuid": "6b77f301-7fec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.114.64:52996/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727783887, "uuid": "6befcf1b-7fec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.229.242:53165/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784021, "uuid": "bbcc0036-7fec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.140.37:40240/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784130, "uuid": "fd1072d9-7fec-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.97.117:45174/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784185, "uuid": "1dfdbf9d-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.134.175:56793/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784186, "uuid": "1e6809aa-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.150.86:45454/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784246, "uuid": "421f4703-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.80.175:35750/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784247, "uuid": "42f91728-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.144.33:56375/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784248, "uuid": "4331616e-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.132.226:51987/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784251, "uuid": "45292263-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.116.146.62:43334/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784252, "uuid": "459d0b71-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.126.132:50619/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784257, "uuid": "48dad6d1-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.122.61.59:36142/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784262, "uuid": "4bd78cf7-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.212.65:59845/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784265, "uuid": "4da854b7-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.170.201.221:57221/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784267, "uuid": "4ed72370-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.7.2:52831/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784273, "uuid": "5219c9c0-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.197.115.215:34570/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784274, "uuid": "52ce5f6f-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.36.148.87:34688/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784274, "uuid": "52ce71db-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.113.158:54054/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784274, "uuid": "52ed59be-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.19.151:35433/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784279, "uuid": "55f9618d-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.170.201.247:35289/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784279, "uuid": "55fdf3e4-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.158.159.83:48730/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784291, "uuid": "5ce311b6-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.42.12:48281/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784292, "uuid": "5d8e1952-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.255.14:48677/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784310, "uuid": "6843da53-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.218.81:57557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784367, "uuid": "8a16a035-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.119.215:42095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784546, "uuid": "f4ac23aa-7fed-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.238.249:56023/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784608, "uuid": "19bff310-7fee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.206.105:60524/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784684, "uuid": "475d3cde-7fee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.130.71:35859/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784726, "uuid": "5ff5a0db-7fee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.89.76:35434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784730, "uuid": "62d78bfb-7fee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.230.28:58862/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784731, "uuid": "631c6635-7fee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.27.136:54878/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784785, "uuid": "83a00666-7fee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.110.1:42404/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727784966, "uuid": "ef5c67ce-7fee-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.197.138:50777/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727785146, "uuid": "5a66d501-7fef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.118.115:49856/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727785146, "uuid": "5ad31a19-7fef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.160.7:33800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727785207, "uuid": "7ef7314d-7fef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.140.37:40240/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727785266, "uuid": "a1cbfd39-7fef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.97.117:45174/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727785386, "uuid": "e98566b5-7fef-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/malesa/66fbd9a4db4c9_GovernmentalSa.exe#abd", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727785446, "uuid": "0d7ed0f5-7ff0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.239.196:37389/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727785509, "uuid": "32e3d9ae-7ff0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.19.164:50783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727785691, "uuid": "9f3b3df2-7ff0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.25.243:52086/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727785747, "uuid": "c0eb8fa2-7ff0-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.229.242:53165/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727785869, "uuid": "0994ad36-7ff1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.218.81:57557/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727786058, "uuid": "7a471e11-7ff1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.76.191:48351/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727786113, "uuid": "9b32a395-7ff1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.71.16.233:39963/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727786114, "uuid": "9b704a3d-7ff1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.14.44:46840/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727786179, "uuid": "c272ea34-7ff1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.64.13:41006/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727786226, "uuid": "de6ad5b6-7ff1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.62.99:47836/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727786230, "uuid": "e0e4c8e8-7ff1-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.240.239:41423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727786285, "uuid": "012d1ad6-7ff2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.206.105:60524/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727786285, "uuid": "014afa8b-7ff2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.110.1:42404/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727786345, "uuid": "25687335-7ff2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.232.62:53868/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727786465, "uuid": "6d092e95-7ff2-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.45.86:41258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727786713, "uuid": "0093df73-7ff3-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.20.182.66/Files/11.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727787189, "uuid": "1c082ea2-7ff4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.208.59:60441/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727787501, "uuid": "d652254f-7ff4-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.36.167:56895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727787846, "uuid": "a3d0b4fb-7ff5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.71.16.233:39963/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727787848, "uuid": "a508bc38-7ff5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.40.200:58198/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727787965, "uuid": "eafafce8-7ff5-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.176.223.215:36345/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727788026, "uuid": "0f428051-7ff6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.64.13:41006/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727788031, "uuid": "1224c41e-7ff6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.244.222:39747/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727788146, "uuid": "568057d9-7ff6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.109.152:40511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727788230, "uuid": "88b17777-7ff6-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.209.116:48174/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727788515, "uuid": "32782046-7ff7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.223.209:51044/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727788746, "uuid": "bc451c2d-7ff7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.158.238:38513/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727788751, "uuid": "bf3b3b76-7ff7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.162.142:55225/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727788817, "uuid": "e688ad52-7ff7-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.208.59:60441/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727789107, "uuid": "93beb505-7ff8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.80.175:35750/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727789108, "uuid": "93f5a51b-7ff8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.30.183:40084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727789126, "uuid": "9eee680c-7ff8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.33.8:50475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727789166, "uuid": "b6cd23d5-7ff8-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.dropbox.com/scl/fi/33c0xwbyl507hcmtrm88z/boking_reserva.vbs?rlkey=8agyotkv430h93h6dnyih6x5u&st=pn9nlu2v&dl=1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727789298, "uuid": "05879078-7ff9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.165.1:60414/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727789347, "uuid": "224e47b9-7ff9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.dropbox.com/scl/fi/33c0xwbyl507hcmtrm88z/boking_reserva.vbs?rlkey=8agyotkv430h93h6dnyih6x5u&st=fxq8w5vb&dl=1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727789589, "uuid": "b2a3f6da-7ff9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.156.236:39863/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727789648, "uuid": "d5e854cc-7ff9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.71.65:58080/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727789656, "uuid": "daee3a7f-7ff9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.30.117:44991/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727789661, "uuid": "dd8a8b05-7ff9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.130.83:51951/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727789709, "uuid": "fa5da895-7ff9-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.244.222:39747/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727789948, "uuid": "88a24e02-7ffa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.151.244:44036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727790013, "uuid": "af7aa822-7ffa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.253.158:60813/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727790067, "uuid": "cf98dfab-7ffa-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.223.209:51044/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727790189, "uuid": "187c7b35-7ffb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.128.28:46467/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727790190, "uuid": "19436b30-7ffb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.87.223:37292/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727790247, "uuid": "3b23c9cc-7ffb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.36.111:39048/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727790366, "uuid": "81d48af4-7ffb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.178.232:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727790554, "uuid": "f1b966a9-7ffb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.98.253:51673/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727790559, "uuid": "f53f80bd-7ffb-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.50.84:55860/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727790608, "uuid": "121ec795-7ffc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.21.114:60186/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727790858, "uuid": "a703ca44-7ffc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.61.203:40521/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727790970, "uuid": "e9ec2628-7ffc-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.158.169:48972/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727791086, "uuid": "2ef45a6d-7ffd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.195.106:51514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727791146, "uuid": "5291e28b-7ffd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.150.122:60458/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727791146, "uuid": "530a5af3-7ffd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.204.228:47398/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727791294, "uuid": "ab08e3f5-7ffd-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.165.1:60414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727791446, "uuid": "0572dcc3-7ffe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.66.30:57120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727791451, "uuid": "0888f179-7ffe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.108.99:50862/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727791451, "uuid": "08897360-7ffe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.177.15:50953/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727791507, "uuid": "2a0fa477-7ffe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.128.28:46467/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727791865, "uuid": "ff92cfca-7ffe-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.54.185:50739/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727791986, "uuid": "47408eb0-7fff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.49.40:39659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727792108, "uuid": "901e5031-7fff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.176.223.215:36345/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727792114, "uuid": "938bc92e-7fff-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.14.100:57553/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727792346, "uuid": "1df4d3a2-8000-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.158.119:53681/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727792408, "uuid": "42f3a8be-8000-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.176.92:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727792466, "uuid": "65e0e3df-8000-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.122.114.47:60841/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727792886, "uuid": "5fb18314-8001-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.204.228:47398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727792901, "uuid": "6900f40d-8001-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.190.50:54796/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727792950, "uuid": "86238338-8001-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.204.107:47543/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727793068, "uuid": "ccb23b4c-8001-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.156.236:39863/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727793139, "uuid": "f69b3447-8001-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.89.209:49516/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727793260, "uuid": "3f03963f-8002-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.163:56959/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727793264, "uuid": "40f9be13-8002-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.251.163:51434/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727793611, "uuid": "10576198-8003-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.78.94:39083/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727793665, "uuid": "307f51c8-8003-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.190.50:54796/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727793728, "uuid": "55b7a08f-8003-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.44.26:46367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727793907, "uuid": "c0b29f7d-8003-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.178.253:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727794025, "uuid": "071e37a6-8004-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.122.114.47:60841/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727794096, "uuid": "312daa48-8004-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.81.210:58703/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727794146, "uuid": "4eb94c64-8004-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.100.93:39874/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727794213, "uuid": "76dc9207-8004-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.76.179:60418/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727794547, "uuid": "3ddd8860-8005-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.26.38:38341/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727794821, "uuid": "e1481593-8005-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.95.32:45511/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727794866, "uuid": "fc3f2a79-8005-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.150.122:60458/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727794986, "uuid": "439c438e-8006-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.19.63:49632/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727794995, "uuid": "48ec98e9-8006-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.110.29.2:51276/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727794998, "uuid": "4abb221a-8006-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.188.181:35320/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727795011, "uuid": "524646f1-8006-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.15.254.227:56995/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727795023, "uuid": "59759bec-8006-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.37.22:44027/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727795046, "uuid": "6762bd1e-8006-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.244.96:35231/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727795051, "uuid": "6a29e1a8-8006-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.3.200:35745/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727795226, "uuid": "d2c4a9ea-8006-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.44.26:46367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727795530, "uuid": "87e37b29-8007-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.95.225:59205/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727795585, "uuid": "a8f67e34-8007-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.39.12:34156/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727795650, "uuid": "cf45741a-8007-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.193.238.47:49137/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727795786, "uuid": "203f1dd3-8008-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.68.183:35748/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727795831, "uuid": "3b429801-8008-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.26.91.20:52792/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727795886, "uuid": "5bf8a1d7-8008-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.81.210:58703/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727796066, "uuid": "c76fbf58-8008-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.26.38:38341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727796364, "uuid": "794bcea0-8009-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.39.12:34156/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727796486, "uuid": "c1a79f92-8009-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.80.175:35750/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727796610, "uuid": "0be7340a-800a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.59.13.232:56026/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727796668, "uuid": "2deccfa8-800a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.26.91.20:52792/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727796668, "uuid": "2e4eeec5-800a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.45.202:36642/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727796727, "uuid": "51511f9a-800a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.11.119:42040/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727796787, "uuid": "753227ad-800a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.193.238.47:49137/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727796847, "uuid": "98e6b745-800a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.180.117:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727796852, "uuid": "9c1dfcfd-800a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.43.26:59834/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727796859, "uuid": "a03a1f6a-800a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.93:43883/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727797025, "uuid": "03203da9-800b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.2.135.171:52612/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727797540, "uuid": "36143eb0-800c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.189.102:47471/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727797686, "uuid": "8cf8bcca-800c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.180.244:41408/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727797687, "uuid": "8dbe7435-800c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.100.158:47945/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727797808, "uuid": "d5f7cde2-800c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.223.26:60117/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727797986, "uuid": "3f99472e-800d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.40.224:39744/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727798107, "uuid": "88224b50-800d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.155.223.162:60552/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727798226, "uuid": "cef29f2d-800d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.95.32:45511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727798285, "uuid": "f222e468-800d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/ldms/66fbfccd837ac_vadggdsa.exe", "Tag": [ { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727798301, "uuid": "fba52d2d-800d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.210.178:46467/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727798345, "uuid": "1593a0eb-800e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/ldms/66fbfcc9963ca_ldfsna.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727798345, "uuid": "1601f0d0-800e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.84.163:43565/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727798407, "uuid": "3a97fd7b-800e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.215.196:46836/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727798467, "uuid": "5e462ce6-800e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.180.252:41169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727798467, "uuid": "5e5beb1c-800e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.11.119:42040/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727798886, "uuid": "581e3526-800f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.54.122:51588/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727798887, "uuid": "59095d15-800f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.96.214:39262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727798954, "uuid": "80dc2b2f-800f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.20.182.66/files/11%20(2).exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727798958, "uuid": "83179ceb-800f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.20.182.66/files/333.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727798958, "uuid": "8356d105-800f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.20.182.66/files/1.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727799071, "uuid": "c65de1d5-800f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.181.208:39774/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727799088, "uuid": "d0906d9f-800f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.233:59043/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727799125, "uuid": "e6da4bb8-800f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.40.224:39744/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727799313, "uuid": "56804afa-8010-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.178.201:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727799426, "uuid": "9a0cb909-8010-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.13.58.113:47965/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727799552, "uuid": "e51d2b35-8010-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.17.163:57657/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727799554, "uuid": "e634ae67-8010-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.177.248:44078/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727799554, "uuid": "e642d6c5-8010-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.18.143:50501/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727799846, "uuid": "94379d8b-8011-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.210.178:46467/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800106, "uuid": "2f28b2dd-8012-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.144:53775/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800271, "uuid": "919a3aad-8012-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.249.250:50390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800328, "uuid": "b3a8ba49-8012-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.144:53775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800449, "uuid": "fbe8d52f-8012-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.217.141:48899/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800460, "uuid": "023d4a3a-8013-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.105.194:46326/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800510, "uuid": "20380113-8013-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.228.210:34981/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800510, "uuid": "203fe8d9-8013-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.96.214:39262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800513, "uuid": "223cdb52-8013-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.131.135:44034/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800524, "uuid": "2876773a-8013-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.242.240:59598/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800567, "uuid": "4217385c-8013-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.126.13:45851/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800625, "uuid": "648a63a2-8013-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.177.119/main_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800625, "uuid": "64dd3e6d-8013-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.68.181/main_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800626, "uuid": "65737e5a-8013-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.28.35.146/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800626, "uuid": "65948b92-8013-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.10.45.143/main_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800686, "uuid": "8901862f-8013-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.54.122:51588/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727800865, "uuid": "f41bca04-8013-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.181.208:39774/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727801046, "uuid": "5fbeb1ce-8014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.114.42:48515/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727801225, "uuid": "ca4e19f5-8014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.11.213:37038/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727801286, "uuid": "eeeb4c79-8014-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.148.239:39384/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727801346, "uuid": "12a66f15-8015-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.141.32:38775/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727801408, "uuid": "37773ef7-8015-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.148.193:42046/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727801647, "uuid": "c5beb20b-8015-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.233.219:39123/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727801826, "uuid": "309e6b8c-8016-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.242.240:59598/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727801897, "uuid": "5ac5e02a-8016-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.185.116:43855/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727802008, "uuid": "9d3ef58c-8016-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.28.35.146/sky.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727802009, "uuid": "9da037e4-8016-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.167.85:47578/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727802185, "uuid": "06a0b790-8017-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.126.13:45851/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727802251, "uuid": "2e2caa31-8017-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.21.34:38746/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727802264, "uuid": "3581ab29-8017-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.116.144:42396/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727802307, "uuid": "4f2b60fd-8017-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.207.116:50907/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727803146, "uuid": "438c1a4b-8019-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.244.219:59132/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727803159, "uuid": "4af4d64a-8019-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.10.169:60619/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727803221, "uuid": "6fefa6ea-8019-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.138.101:56885/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727803330, "uuid": "b11931d5-8019-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.93.204:56101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727803391, "uuid": "d5568439-8019-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.242.97:39056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727803445, "uuid": "f59a8961-8019-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.11.92.17/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727803507, "uuid": "1a5ac248-801a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.207.116:50907/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727803507, "uuid": "1a63ef17-801a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.185.116:43855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727803653, "uuid": "71a639ee-801a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.102.14:55140/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804002, "uuid": "41c4e0f9-801b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.242.127:56202/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804053, "uuid": "603d81ca-801b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.166.202:58490/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804069, "uuid": "6955b65c-801b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.92:53545/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804109, "uuid": "81a27614-801b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.240.239:41423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804110, "uuid": "81cf5832-801b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.31/bins/jade.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804110, "uuid": "81ddb8ab-801b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.31/bins/jade.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804110, "uuid": "81e6932b-801b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.31/bins/jade.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804110, "uuid": "820869c8-801b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.31/bins/jade.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804111, "uuid": "82dd14a1-801b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.31/bins/jade.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804112, "uuid": "82e767c6-801b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.31/bins/jade.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804112, "uuid": "82ef84a2-801b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.31/bins/jade.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804113, "uuid": "84030df9-801b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.31/bins/jade.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804113, "uuid": "8407a147-801b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.31/bins/jade.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804114, "uuid": "8417f7fa-801b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.31/bins/jade.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804165, "uuid": "a29eeea6-801b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.31/bins/jade.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804286, "uuid": "ead30c83-801b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.94.210.3:32784/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804709, "uuid": "e731f7b3-801c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.20.135:47897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804728, "uuid": "f29a2607-801c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.250.140:34733/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804825, "uuid": "2c05ff00-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.242.97:39056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804886, "uuid": "5059aa48-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.93.204:56101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804946, "uuid": "744bc1af-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.104.243.228/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804946, "uuid": "744c2971-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.104.243.228/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804946, "uuid": "744e8fcb-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.104.243.228/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804946, "uuid": "744ee114-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.104.243.228/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804946, "uuid": "7451841a-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.104.243.228/hiddenbin/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804947, "uuid": "74c1469a-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.156.37:50045/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804947, "uuid": "74c56241-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.240.239.101/Demon.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804974, "uuid": "85162509-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.80/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804974, "uuid": "85173c7e-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.80/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804974, "uuid": "85239e5a-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.80/garm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804974, "uuid": "8524a3fa-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.80/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804974, "uuid": "8527715d-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.80/gmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804974, "uuid": "8527e2a2-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.80/tmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804974, "uuid": "8527e841-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.80/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804976, "uuid": "862d4b1b-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.80/garm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804976, "uuid": "86313ff5-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.80/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804976, "uuid": "86475772-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.80/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804976, "uuid": "8649c56d-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.80/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804976, "uuid": "864adee0-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.80/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804976, "uuid": "864adf12-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.80/gmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804976, "uuid": "864adfe6-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.80/garm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804976, "uuid": "864b02ea-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.80/garm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804976, "uuid": "864b052b-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.80/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727804976, "uuid": "8651e9a0-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.89.247.80/tmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805006, "uuid": "98180de3-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.104.243.228/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805006, "uuid": "981d5147-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.104.243.228/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805064, "uuid": "ba8b2f16-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.104.243.228/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805125, "uuid": "deeebdc6-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.104.243.228/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805125, "uuid": "def495ce-801d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.104.243.228/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805246, "uuid": "2748ec16-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.15.199:47998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "4bdd11c2-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/juicenc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "4be64b8d-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/pass", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "4bf2990b-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/asd.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "4c11ffda-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.99/aa.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "4c1218a1-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.99/bx", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "4c1319f2-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.99/revshell", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "4c2bd954-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/secret", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "4c3ede12-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/install", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "4c4b9484-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.99/webra", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "4c4bbd9d-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/nvidia.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "4c4ca673-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/mig", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805308, "uuid": "4c578b86-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.99/av.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805309, "uuid": "4c5e6ccd-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/xmr.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805309, "uuid": "4c727450-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/2023", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805309, "uuid": "4c916360-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/k", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805309, "uuid": "4c92309a-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/juiceseif.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805309, "uuid": "4ceb02fe-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/hide", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805309, "uuid": "4ceb1d97-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/iptables", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805310, "uuid": "4d879453-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/last", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805311, "uuid": "4ded2fa2-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/i.fake", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805338, "uuid": "5e1412da-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/test.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805373, "uuid": "7293f494-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/dr.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805418, "uuid": "8dccae26-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/cpu.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805531, "uuid": "d0b3eeda-801e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/lan.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805660, "uuid": "1e067ef5-801f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/dev.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805766, "uuid": "5d32b769-801f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.20.53/jbrute", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805788, "uuid": "6a28fe33-801f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.179.210:50157/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805789, "uuid": "6ae7f720-801f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.85.234:47501/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805790, "uuid": "6b840842-801f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.176.8:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805794, "uuid": "6decf40a-801f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.30.110.174:60424/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805795, "uuid": "6e0eeee9-801f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.251.84:58711/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805799, "uuid": "70aeaf23-801f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.243:51381/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805804, "uuid": "7379c46e-801f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.241.247:50854/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805813, "uuid": "794bf9e5-801f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.2.167:36369/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805821, "uuid": "7dd2e6e4-801f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.80.73.150:42206/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805845, "uuid": "8c16d841-801f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.182.25:33892/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805849, "uuid": "8e4be766-801f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.90.78:52499/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805850, "uuid": "8eceeaae-801f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.205.114:59193/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805909, "uuid": "b28777c2-801f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.169.175:55097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805940, "uuid": "c498dad1-801f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.208.74:52822/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805965, "uuid": "d3b0fb95-801f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.195.137:47486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727805967, "uuid": "d4eced14-801f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.94.210.3:32784/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727806146, "uuid": "3f77c904-8020-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.62.61.237:2024/test1/1-1/SPOOF.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727806745, "uuid": "a45f0465-8021-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.128.134:47571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727806872, "uuid": "f01a79e5-8021-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.251.238:47567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727806926, "uuid": "104b8c1a-8022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.169.175:55097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727806960, "uuid": "24c6e5c0-8022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.226.211:57291/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727806991, "uuid": "37458796-8022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.56.8.161:43363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727807165, "uuid": "9eceebea-8022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.177.119/c.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727807166, "uuid": "9f7a9d94-8022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.170.129.197:60120/i", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727807166, "uuid": "9fa1d4a9-8022-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.98.173:53495/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727807346, "uuid": "0ae206ee-8023-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.12.248:45778/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727807411, "uuid": "318e519c-8023-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.179.212:59495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727807647, "uuid": "bdfa65f3-8023-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.223.203:47145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727807945, "uuid": "6fffd393-8024-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.207.236:50402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727808042, "uuid": "a99811df-8024-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.198.241:41290/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727808131, "uuid": "debad141-8024-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.30.192:49174/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727808487, "uuid": "b2f7ba64-8025-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.30.35:35250/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727809045, "uuid": "ff570174-8026-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.7.25:47381/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727809145, "uuid": "3afb7e57-8027-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.223.203:47145/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727809386, "uuid": "caa61f6e-8027-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.251.238:47567/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727809396, "uuid": "d06dff82-8027-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.182.214:34912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727809506, "uuid": "127d2d21-8028-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.30.192:49174/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727809686, "uuid": "7d9a1cca-8028-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.30.35:35250/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727809701, "uuid": "863b8a62-8028-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.192:36240/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727809959, "uuid": "2018019b-8029-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.53.125:37071/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727810112, "uuid": "7bbbec1c-8029-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.123.85.210/botnet.x86", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727810362, "uuid": "106ec302-802a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.36:54107/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727810588, "uuid": "9703d2e2-802a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.119.57:58072/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727810707, "uuid": "de605969-802a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.145.39:52173/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727810721, "uuid": "e66e08de-802a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.207.210:35132/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811068, "uuid": "b51022a4-802b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.252.123/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811068, "uuid": "b511ebb6-802b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.252.123/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811068, "uuid": "b514771f-802b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.252.123/bins/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811126, "uuid": "d7c4dee1-802b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.252.123/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811126, "uuid": "d7ca9a7c-802b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.252.123/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811126, "uuid": "d7d72969-802b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.252.123/bins/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811127, "uuid": "d86e781e-802b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.192:36240/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811186, "uuid": "fbbda450-802b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.252.123/bins/x86_32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811204, "uuid": "065a4b42-802c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.227.84:34763/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811247, "uuid": "1fbff827-802c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.53.125:37071/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811258, "uuid": "2671ab3b-802c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.34.94:33511/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811427, "uuid": "8b85feda-802c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.213.190.194/tel.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811607, "uuid": "f6889a83-802c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.145.39:52173/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811786, "uuid": "610a2b62-802d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.133.72:46738/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727811844, "uuid": "84008026-802d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.248.12.179:46526/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812145, "uuid": "377e6239-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.62.139:40815/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812149, "uuid": "39dd13b4-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.97.34:35195/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812206, "uuid": "5b7b09f9-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.140/lol", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812206, "uuid": "5b7b42e8-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.140/sparc.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812206, "uuid": "5b7b81ea-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.140/sh4.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812206, "uuid": "5b7df056-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.140/m68k.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812206, "uuid": "5b7df30e-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.140/lol.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812206, "uuid": "5b7e1f9d-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.140/powerpc.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812206, "uuid": "5b8a16e4-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.216/m68k.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812206, "uuid": "5b8c0f87-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.216/sh4.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812206, "uuid": "5b8cd49c-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.216/sparc.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812206, "uuid": "5b902b87-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.216/powerpc.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812210, "uuid": "5ddacda1-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.216/arm.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812210, "uuid": "5de11a37-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.216/lol", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812210, "uuid": "5de2af3c-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.140/arm.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812210, "uuid": "5de5470e-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.216/mipsel.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812210, "uuid": "5de9d048-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.140/mips.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812210, "uuid": "5ded0617-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.216/mips.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812210, "uuid": "5deebd09-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.216/x86_32.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812210, "uuid": "5deed97c-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.140/x86_64.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812210, "uuid": "5dfd8d13-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.140/arm5.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812210, "uuid": "5dfd9185-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.216/arm6.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812210, "uuid": "5dfdad6c-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.140/mipsel.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812210, "uuid": "5dffd869-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.216/x86_64.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812210, "uuid": "5e0454e9-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.216/lol.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812210, "uuid": "5e13dfa0-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.216/arm5.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812210, "uuid": "5e2e4d56-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.187.216/arm7.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812215, "uuid": "60ae59d2-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.213.69:59616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812265, "uuid": "7e9e459d-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.140/x86_32.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812265, "uuid": "7eb15a5b-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.140/arm7.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812265, "uuid": "7eb2abaf-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.216.19.140/arm6.nn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812431, "uuid": "e1732ce7-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.254.30:47567/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812452, "uuid": "ee0c446c-802e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.183.133:44101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812686, "uuid": "79a198bb-802f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.45.28:48486/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812881, "uuid": "edc95660-802f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.2.188:38752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812926, "uuid": "08abe909-8030-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.34.94:33511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812933, "uuid": "0cd17225-8030-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.127.220:56700/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727812935, "uuid": "0e3d4bce-8030-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.108.146.126:37672/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727813079, "uuid": "63dd3bb0-8030-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.68.216:53664/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727813166, "uuid": "97ecf7bd-8030-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.227.84:34763/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727813346, "uuid": "03490ce9-8031-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.129.240:41876/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727813422, "uuid": "30a7d981-8031-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.95.44:57903/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727813765, "uuid": "fd161d4b-8031-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.213.69:59616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727813947, "uuid": "695fbcbd-8032-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.239:49551/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727813953, "uuid": "6c965875-8032-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.214.236:39367/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727813959, "uuid": "7027a853-8032-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.201:42065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727813963, "uuid": "72b0c9d7-8032-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.100:37130/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727814126, "uuid": "d4177173-8032-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.125.52:39515/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727814245, "uuid": "1ae70f1c-8033-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/prog/66fbfcc301a31_swws.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "MarsStealer", "colour": "#167f73", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727814248, "uuid": "1c701581-8033-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.206.54:36914/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727814324, "uuid": "4a3b6bc3-8033-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.36.34:46177/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727814546, "uuid": "ce11425a-8033-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.108.146.126:37672/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727814611, "uuid": "f4e9e5b6-8033-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.133.72:46738/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727814846, "uuid": "8138fa14-8034-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.224.21.204:54434/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727814860, "uuid": "895e45c0-8034-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.67:50662/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727814862, "uuid": "8ad9885c-8034-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.244.161:59406/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727814907, "uuid": "a591ce10-8034-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.125.52:39515/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727814912, "uuid": "a854c9b4-8034-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.178.113:54229/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727814968, "uuid": "c9ce81a3-8034-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.240.154:50485/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727815266, "uuid": "7b8ea4f7-8035-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.195.137:47486/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727815445, "uuid": "e6535be3-8035-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.95.44:57903/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727815522, "uuid": "13d985bb-8036-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.254.54.89:35832/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727815746, "uuid": "99a2d3f7-8036-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.19.230:52040/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727815746, "uuid": "99b4f3eb-8036-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.57.89.221:55890/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727815815, "uuid": "c28a4098-8036-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.140.78:46616/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816051, "uuid": "4f343dd7-8037-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.159.175:48515/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816115, "uuid": "7555729e-8037-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.67:50662/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816295, "uuid": "e0ba91d6-8037-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.226.27:48964/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816585, "uuid": "8d7b7b37-8038-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.81.92:50894/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816586, "uuid": "8e0de838-8038-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.104.2:51687/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816599, "uuid": "95dae9dd-8038-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.120.226:41071/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816619, "uuid": "a21a0083-8038-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.197.115.222:58016/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816620, "uuid": "a23c9329-8038-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.84.173:44506/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816620, "uuid": "a259f719-8038-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.68.232:60250/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816645, "uuid": "b13b2873-8038-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.135.156.46:56822/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816646, "uuid": "b209036b-8038-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.175.101.114:59382/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816647, "uuid": "b25fc71e-8038-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.47.232:43873/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816647, "uuid": "b26f2d0f-8038-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.197.222.60:55956/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816651, "uuid": "b4b72c07-8038-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.204.77:50343/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816651, "uuid": "b4cfbb95-8038-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.56.226:41579/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816651, "uuid": "b50451ac-8038-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.132.110:45480/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816654, "uuid": "b6ac61ab-8038-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.170.201.163:46326/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816667, "uuid": "bea756ab-8038-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.66:33760/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727816841, "uuid": "260fade9-8039-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.22.14:48700/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817007, "uuid": "88f306fc-8039-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.254.54.89:35832/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817246, "uuid": "1783849e-803a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.2.193:44603/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817309, "uuid": "3cef9017-803a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.108.76:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817486, "uuid": "a6f892fa-803a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.116.71:51555/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817554, "uuid": "cf84c243-803a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.215:37206/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817608, "uuid": "ef22c62e-803a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/yuop/66fc5c187ba75_lyla343.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817609, "uuid": "f03378cb-803a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.59.153.150:40135/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817615, "uuid": "f3d1ba1f-803a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.100.18:48120/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817727, "uuid": "363940ff-803b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.56.226:41579/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817907, "uuid": "a1cd9753-803b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.128.134:47571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727817907, "uuid": "a1dbd11e-803b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.159.175:48515/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727818088, "uuid": "0d5e8922-803c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.187.111:37237/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727818221, "uuid": "5cd73945-803c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.87.241:44132/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727818267, "uuid": "7826a455-803c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.44.104/ldms/66fbfcd0ec153_vdsgffdg15.exe", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727818267, "uuid": "7837b5b2-803c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.240.154:50485/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727818327, "uuid": "9bdd282d-803c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "https://cyunj.shades.whatisaweekend.com/orderReview", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727818387, "uuid": "bfaf6dac-803c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.22.14:48700/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727818451, "uuid": "e61a694d-803c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.221.59:36853/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727818463, "uuid": "ecc2ebd4-803c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.249.28:58860/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727818686, "uuid": "71bd0305-803d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.40.89:40751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727818821, "uuid": "c2337922-803d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.247.212:51164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727819166, "uuid": "8ff3f0be-803e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.116.71:51555/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727819167, "uuid": "90ce2e2b-803e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.153.146.219:56698/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727819287, "uuid": "d801cb44-803e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.125.134:55709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727819346, "uuid": "fb6c0f81-803e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.11.10:52465/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727819358, "uuid": "0284bb8e-803f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.243.249:55259/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727819415, "uuid": "24a03544-803f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.226.27:48964/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727819436, "uuid": "30bbf5ad-803f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.140.97:55987/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727819494, "uuid": "534dbc1d-803f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.61.203:40521/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727819585, "uuid": "8a00ad92-803f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.153.96:57515/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727819765, "uuid": "f537c05c-803f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.11.10:52465/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727819784, "uuid": "009d3e25-8040-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.82.137:41378/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727820082, "uuid": "b20d255a-8040-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.11.67:36197/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727820321, "uuid": "40ad3c29-8041-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.241:57428/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727820427, "uuid": "7f745b51-8041-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.247.212:51164/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727820501, "uuid": "abd23a7b-8041-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.23.2:46819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727820545, "uuid": "c633a31e-8041-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.72.19:42374/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727820550, "uuid": "c8c1ece0-8041-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.127.138:44625/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727820725, "uuid": "3164bdaa-8042-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.244.37:50363/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727820795, "uuid": "5adde155-8042-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.12.31:60085/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727820846, "uuid": "792c25b0-8042-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.125.134:55709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727821025, "uuid": "e42be804-8042-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.100.191:35814/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727821025, "uuid": "e43cb91f-8042-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.140.97:55987/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727821145, "uuid": "2badd83a-8043-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.108.21:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727821146, "uuid": "2bff0957-8043-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.103.195:49314/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727821266, "uuid": "73ba1d1c-8043-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.208.107:43284/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727821386, "uuid": "bb72b879-8043-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.87.157:36394/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727821510, "uuid": "05397f06-8044-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.158.91:59686/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727821714, "uuid": "7eefb6f2-8044-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.238.35:60825/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727821747, "uuid": "9254203d-8044-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.31.44:43918/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727821986, "uuid": "2112fbff-8045-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.127.138:44625/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727821994, "uuid": "25f16b23-8045-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.78.93:44232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727822002, "uuid": "2a6232f5-8045-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.255.187:42807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727822046, "uuid": "44c874fc-8045-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.72.19:42374/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727822346, "uuid": "f7631a72-8045-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.31.44:43918/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727822525, "uuid": "6251f8ba-8046-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.100.191:35814/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727822526, "uuid": "630ac74c-8046-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.46.18:60662/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727822537, "uuid": "697ffb01-8046-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.221.149:34029/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727822648, "uuid": "ab77b41d-8046-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.150.51:32967/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727822826, "uuid": "159170f3-8047-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.220.112.202:58522/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727822891, "uuid": "3c40358f-8047-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.66.143:53882/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727822947, "uuid": "5d6b98c7-8047-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.193.249:44905/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727823372, "uuid": "5ae13497-8048-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.129.18:43956/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727823425, "uuid": "7a85098c-8048-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.87.157:36394/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727823460, "uuid": "8f353a23-8048-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.29.14:59203/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727823485, "uuid": "9e86665e-8048-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.78.93:44232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727823612, "uuid": "ea2ca830-8048-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.22.238:39959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727823666, "uuid": "0a5a4fa0-8049-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.255.187:42807/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727823726, "uuid": "2e297feb-8049-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.150.51:32967/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727823792, "uuid": "551addf5-8049-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.114.37:47306/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727823846, "uuid": "756ee4a1-8049-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.244.182:45617/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727823852, "uuid": "79543358-8049-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.141.34:52208/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727823912, "uuid": "9cb46f92-8049-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.11.140:56009/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727824026, "uuid": "e0ded502-8049-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.133.209:46777/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727824030, "uuid": "e367c9b1-8049-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.18.147:38561/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727824037, "uuid": "e751aafe-8049-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.85.146:46221/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727824041, "uuid": "ea03e67b-8049-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.46.18:60662/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727824145, "uuid": "2798f9f9-804a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.245.134:34498/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727824145, "uuid": "27b992f5-804a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.244.182:45617/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727824209, "uuid": "4dec39eb-804a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.19.230:52040/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727824386, "uuid": "b728446f-804a-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.221.149:34029/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727824508, "uuid": "006f8b7c-804b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.66.143:53882/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727824509, "uuid": "00a205db-804b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.36.155:48736/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727824571, "uuid": "2595a3fb-804b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.188.97:53188/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727824686, "uuid": "6a230855-804b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.220.112.202:58522/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727824759, "uuid": "95875b25-804b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.17.29:60093/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727824809, "uuid": "b3833120-804b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.240.158:37292/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727824818, "uuid": "b8bc8b37-804b-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.23.227:40531/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727825167, "uuid": "88e71a2a-804c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.241.193:33059/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727825174, "uuid": "8d590627-804c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.96.121.141:41745/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727825179, "uuid": "9029319b-804c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.173.59:35468/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727825226, "uuid": "ac3452e3-804c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.79.106:38896/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727825226, "uuid": "ac3b1894-804c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.49.135:39885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727825286, "uuid": "cfabcb94-804c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.129.18:43956/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727825346, "uuid": "f3551e13-804c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.114.37:47306/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727825346, "uuid": "f3caf7b4-804c-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.250.69:43219/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727825412, "uuid": "1b2d3430-804d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.96.224:46593/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727825587, "uuid": "83507fc7-804d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.77.32:54975/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727825662, "uuid": "aff61e99-804d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.22.67:33095/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727825709, "uuid": "cbd6df15-804d-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.19.230:52040/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727825830, "uuid": "142818f7-804e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.82.159:53471/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727825945, "uuid": "58f27e91-804e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.11.140:56009/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727826012, "uuid": "80a80302-804e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.75.58:51873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727826065, "uuid": "a066d258-804e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.36.155:48736/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727826077, "uuid": "a762370d-804e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.229:49691/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727826126, "uuid": "c47e51fb-804e-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.188.97:53188/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727826426, "uuid": "7754d7dd-804f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.101.164:52583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727826485, "uuid": "9a8d216a-804f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.49.135:39885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727826486, "uuid": "9afff3f2-804f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.96.224:46593/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727826609, "uuid": "e44d7534-804f-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.87.29:35585/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727826666, "uuid": "066b2fd6-8050-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.251.173.59:35468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727826845, "uuid": "7158c2af-8050-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.229.186.181:55908/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727826846, "uuid": "71b872db-8050-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.192.186:43463/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727826907, "uuid": "95cffb1f-8050-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.250.69:43219/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727826912, "uuid": "994bccfb-8050-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.187.99:59799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727826989, "uuid": "c6f9f52b-8050-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.114.136:50112/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727827098, "uuid": "07d3a228-8051-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.134.44:34302/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727827105, "uuid": "0bd6e3c4-8051-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.93.209:48588/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1727827160, "uuid": "2cd3acae-8051-11ef-afe5-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.254.225:59231/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727812923, "uuid": "07257ce6-8030-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.108.146.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756344, "uuid": "4b034efa-7fac-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.3.154.218", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727773445, "uuid": "1c28e479-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.33.137.57", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727773445, "uuid": "1c31e058-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.33.36.151", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727764208, "uuid": "9ab3928e-7fbe-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.114.163.238", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727762643, "uuid": "f5fc7f45-7fba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.15.254.166", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727794984, "uuid": "4234ae4e-8006-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.15.254.227", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784244, "uuid": "40df85f4-7fed-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.197.115.215", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727816584, "uuid": "8cf0dbe7-8038-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.197.115.222", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727740984, "uuid": "87e63741-7f88-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.197.115.25", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727741044, "uuid": "ab7bb805-7f88-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.199.180.80", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727776144, "uuid": "64ba4aad-7fda-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.87.129.195", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727778423, "uuid": "b391552f-7fdf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.188.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727743864, "uuid": "3c7ef9ae-7f8f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.183.53.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727775306, "uuid": "712f4d9e-7fd8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.237.134.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727777943, "uuid": "955e802d-7fde-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.101.161", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727770505, "uuid": "43f9e2f5-7fcd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.103.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727816823, "uuid": "1bbe898d-8039-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.246.22.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761263, "uuid": "bf568877-7fb7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.246.55.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727741584, "uuid": "ed9573fe-7f89-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.100.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727802244, "uuid": "29c9d35a-8017-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.116.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784244, "uuid": "40e0ddf7-7fed-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.255.14", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727794083, "uuid": "29a88d58-8004-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.81.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727815505, "uuid": "09e40c93-8036-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.254.54.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784244, "uuid": "40e15682-7fed-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.116.146.62", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727776323, "uuid": "cfbf95e5-7fda-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.205.192.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727816044, "uuid": "4af358c7-8037-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.159.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761864, "uuid": "25200f97-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.229.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742846, "uuid": "dda3cb00-7f8c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.230.50.255", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727803323, "uuid": "acff35ed-8019-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.230.93.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727752984, "uuid": "789cb1a3-7fa4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.127.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751844, "uuid": "d0f8eb41-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.245.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727789585, "uuid": "b094b743-7ff9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.156.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727812206, "uuid": "5b642456-802e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.213.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727776804, "uuid": "ee94d086-7fdb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.78.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727777463, "uuid": "77441d81-7fdd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.23.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727798883, "uuid": "56a711cc-800f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.96.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727795824, "uuid": "371aeec0-8008-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.26.91.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727762583, "uuid": "d21cc8d1-7fba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.87.119.184", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727762643, "uuid": "f5fc9d38-7fba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.88.3.26", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727822823, "uuid": "13c9f971-8047-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.220.112.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760184, "uuid": "3c235fa1-7fb5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.220.167.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727821264, "uuid": "724d4b5f-8043-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.208.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727749263, "uuid": "cecab621-7f9b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.218.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727746804, "uuid": "151e4e1c-7f96-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.223.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760306, "uuid": "84ad84f5-7fb5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.230.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727808124, "uuid": "da599b78-8024-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.30.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727808484, "uuid": "b12ac6e1-8025-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.30.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727749143, "uuid": "873d458f-7f9b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.250.29", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727773445, "uuid": "1c287ed6-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.198.11", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727757065, "uuid": "f90f8f8c-7fad-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.197.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727757543, "uuid": "16181e93-7faf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.128.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727791143, "uuid": "514d4728-7ffd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.150.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727790964, "uuid": "e624c58b-7ffc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.158.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805783, "uuid": "675df8f0-801f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.169.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742964, "uuid": "244b9fac-7f8d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.11.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784605, "uuid": "185417e0-7fee-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.206.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727825164, "uuid": "873b947f-804c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.96.121.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727763183, "uuid": "37e1990e-7fbc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.24.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727748006, "uuid": "e150f2a3-7f98-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.119.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727791444, "uuid": "0436f5d9-7ffe-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.177.15", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727766543, "uuid": "0a6c957d-7fc4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.178.187", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727809924, "uuid": "0b1ecdad-8029-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.53.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727767743, "uuid": "d5d6c9a5-7fc6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.55.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727812144, "uuid": "365bcb60-802e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.97.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727762643, "uuid": "f5fc5a80-7fba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.148.109.31", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727769124, "uuid": "0cb3b27c-7fca-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.2.135.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727789105, "uuid": "9299156b-7ff8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.33.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756224, "uuid": "037fd16c-7fac-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.39.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727744705, "uuid": "3194195a-7f91-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.250.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727789284, "uuid": "fcbbd8dd-7ff8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.165.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761983, "uuid": "6c8958cb-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.174.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727816644, "uuid": "b09c7319-8038-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.197.222.60", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727819344, "uuid": "f9dc69a4-803e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.11.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727823905, "uuid": "9885b5af-8049-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.11.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727792106, "uuid": "8edb85e3-7fff-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.14.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727752805, "uuid": "0e033783-7fa4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.126.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800444, "uuid": "f9276b74-8012-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.217.141", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754783, "uuid": "a91657b0-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.220.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805783, "uuid": "675e79f5-801f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.85.234", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727745605, "uuid": "4a72cf6f-7f93-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.201.12.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817484, "uuid": "a540a278-803a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.202.116.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756283, "uuid": "27177805-7fac-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.202.181.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727826006, "uuid": "7cc74ce4-804e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.202.75.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727772544, "uuid": "032671dd-7fd2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.203.137.175", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727741044, "uuid": "ab7e87c3-7f88-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.203.61.69", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727750944, "uuid": "b8691515-7f9f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.239.244", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727786224, "uuid": "dcfba99f-7ff1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.62.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756283, "uuid": "271788e8-7fac-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.134.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727762643, "uuid": "f5fc8635-7fba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.18.191", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727749564, "uuid": "81db8543-7f9c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.183.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727745484, "uuid": "0223bad3-7f93-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.184.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727801883, "uuid": "52c7df6a-8016-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.185.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751664, "uuid": "65af2d33-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.19.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727771943, "uuid": "9d23dbb2-7fd0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.19.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727773023, "uuid": "20a5229c-7fd3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.24.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727794505, "uuid": "24fa7baa-8005-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.26.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727786164, "uuid": "b96a3fe7-7ff1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.64.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727795764, "uuid": "138011f5-8008-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.68.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727813043, "uuid": "4e573398-8030-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.68.216", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727767143, "uuid": "7021a073-7fc5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.69.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727776924, "uuid": "35aae290-7fdc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.76.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727786045, "uuid": "728c37b8-7ff1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.76.191", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727755444, "uuid": "32dfd040-7faa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.79.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727803144, "uuid": "41f752d8-8019-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.10.169", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727824743, "uuid": "8c8177ba-804b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.17.29", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727820484, "uuid": "a1b596bc-8041-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.23.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727824743, "uuid": "8c8169e8-804b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.23.227", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727745305, "uuid": "976af076-7f92-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.75.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727798284, "uuid": "f13f22f2-800d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.210.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756883, "uuid": "8c64b7e7-7fad-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.219.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727755324, "uuid": "eb798825-7fa9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.23.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727744644, "uuid": "0d44e7a4-7f91-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.24.225", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756462, "uuid": "91d617cd-7fac-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.25.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804706, "uuid": "e5231b20-801c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.250.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727793244, "uuid": "356cfaa4-8002-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.251.163", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727771466, "uuid": "8064145e-7fcf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.26.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727819763, "uuid": "f40cf60d-803f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.82.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727818208, "uuid": "55350b77-803c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.87.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727820064, "uuid": "a7469464-8040-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.11.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727826964, "uuid": "b7bd44c2-8050-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.114.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727781064, "uuid": "d971dd73-7fe5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.13.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727749808, "uuid": "136c1567-7f9d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.18.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727753106, "uuid": "c157b1b4-7fa4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.18.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727825645, "uuid": "a5c255bb-804d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.22.67", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727753284, "uuid": "2b625d8b-7fa5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.23.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727750523, "uuid": "bdef71c2-7f9e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.24.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751664, "uuid": "65af1ae4-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.240.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727779444, "uuid": "139d88ff-7fe2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.241.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727803985, "uuid": "373a90e3-801b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.242.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727743383, "uuid": "1dfc1c5c-7f8e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.242.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727775963, "uuid": "f9043fa3-7fd9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.28.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727823423, "uuid": "799008cc-8048-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.29.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727789645, "uuid": "d40a9be4-7ff9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.30.117", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727755564, "uuid": "7a3da991-7faa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.32.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761805, "uuid": "02569639-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.33.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727787483, "uuid": "cb9c03db-7ff4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.36.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727814305, "uuid": "3ea6fdb0-8033-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.36.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727746445, "uuid": "3ec0193c-7f95-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.38.152", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727769724, "uuid": "728bfe21-7fcb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.39.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727778844, "uuid": "ae7e6d7d-7fe0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.5.37", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727774224, "uuid": "ec6c6d3c-7fd5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.8.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727748305, "uuid": "93619cf6-7f99-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.80.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727762643, "uuid": "f5fc9aec-7fba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.81.121", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727814844, "uuid": "80050d6f-8034-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.81.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727820305, "uuid": "36cea517-8041-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.82.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727747944, "uuid": "bc257eda-7f98-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.83.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727810343, "uuid": "05649ac6-802a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.83.36", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727746445, "uuid": "3ebfd468-7f95-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.83.78", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727744524, "uuid": "c5ef8d7f-7f90-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.84.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804045, "uuid": "5b034b6b-801b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.84.92", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727824024, "uuid": "df6933cc-8049-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.85.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727799063, "uuid": "c1d11bd4-800f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.85.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727747043, "uuid": "a390d4e2-7f96-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.85.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727813944, "uuid": "67845bae-8032-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.86.100", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727762043, "uuid": "905490d5-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.86.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727755444, "uuid": "32dfd5f7-7faa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.87.141", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800084, "uuid": "225931a4-8012-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.87.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727793244, "uuid": "356c2c17-8002-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.88.163", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756043, "uuid": "981caa50-7fab-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.88.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727765584, "uuid": "ce95e9be-7fc1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.89.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727769243, "uuid": "53a0ecc5-7fca-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.89.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727749443, "uuid": "3a1a08f7-7f9c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.89.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727778844, "uuid": "ae7e38ec-7fe0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.89.69", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727752323, "uuid": "eea8b307-7fa2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.90.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727779743, "uuid": "c61597c1-7fe2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.90.234", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805783, "uuid": "675eaa2e-801f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.90.243", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727796845, "uuid": "97b2bd5f-800a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.90.93", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727750165, "uuid": "e825063d-7f9d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.91.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727826063, "uuid": "9f283b11-804e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.92.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727753883, "uuid": "908dbdc0-7fa6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.93.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727768824, "uuid": "59a976bf-7fc9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.93.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727816644, "uuid": "b09caf2f-8038-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.93.66", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727813944, "uuid": "678447a3-8032-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.94.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754964, "uuid": "1465bad4-7fa9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.94.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727771943, "uuid": "9d23c0b9-7fd0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.95.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727809684, "uuid": "7c770294-8028-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.95.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754544, "uuid": "1a384e93-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.95.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817544, "uuid": "c936c4fd-803a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.95.215", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727773445, "uuid": "1c2999ea-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.187.222", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727766244, "uuid": "57e84a59-7fc3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.217.39", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727822523, "uuid": "611ada4e-8046-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.221.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754306, "uuid": "8c7fcf9b-7fa7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.208.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727747284, "uuid": "32d0d591-7f97-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.238.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727824743, "uuid": "8c817bbd-804b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.240.158", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756106, "uuid": "bd59c8d5-7fab-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.60.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727790844, "uuid": "9ecf9b74-7ffc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.61.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727762164, "uuid": "d82e6c15-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.62.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727740984, "uuid": "87e62996-7f88-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.78.247", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760843, "uuid": "c5193252-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.126.166", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756883, "uuid": "8c64b176-7fad-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.127.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727821984, "uuid": "1fbeeec8-8045-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.255.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727827084, "uuid": "ff68406a-8050-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.93.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727813406, "uuid": "26b526d5-8031-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.95.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727806924, "uuid": "0f67b770-8022-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.214.226.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727773264, "uuid": "b0710754-7fd3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.147.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727819344, "uuid": "f9dc75ca-803e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.243.249", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742608, "uuid": "4fbcb34d-7f8c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.246.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784005, "uuid": "b242e8c9-7fec-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.140.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811245, "uuid": "1ebd5def-802c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.34.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727753106, "uuid": "c15747dc-7fa4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.35.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784244, "uuid": "40e085b5-7fed-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.42.12", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727743683, "uuid": "d0f503ac-7f8e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.58.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727793126, "uuid": "eedf5579-8001-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.89.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727768223, "uuid": "f39edf04-7fc7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.112.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782144, "uuid": "5d0024bc-7fe8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.126.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727818084, "uuid": "0b073e5f-803c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.187.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727743204, "uuid": "b34f5532-7f8d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.240.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727778484, "uuid": "d7a63e89-7fdf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.32.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727757844, "uuid": "c9044868-7faf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.33.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727779684, "uuid": "a2c91310-7fe2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.35.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727790244, "uuid": "392766b2-7ffb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.36.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727796845, "uuid": "97b2adbd-800a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.43.26", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727757723, "uuid": "816de889-7faf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.44.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727822523, "uuid": "611ac552-8046-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.46.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754843, "uuid": "ccaf5e29-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.49.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727748363, "uuid": "b6655268-7f99-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.81.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727764684, "uuid": "b6499f76-7fbf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.83.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727783464, "uuid": "6fe5e3e0-7feb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.89.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727777044, "uuid": "7d4d56c1-7fdc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.91.23", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727755623, "uuid": "9d98f299-7faa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.145.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761743, "uuid": "dd7762ba-7fb8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.208.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727778544, "uuid": "fb2e838d-7fdf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.72.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727753344, "uuid": "4ef97d68-7fa5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.78.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756944, "uuid": "b0a0efa2-7fad-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.118.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727747343, "uuid": "5678c99c-7f97-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.203.127", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800507, "uuid": "1e9600e1-8013-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.242.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727757366, "uuid": "ac36a37e-7fae-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.118.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727783823, "uuid": "4639088a-7fec-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.197.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727810706, "uuid": "dd3cb57c-802a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.207.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727771645, "uuid": "eb2387e4-7fcf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.207.29", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727818444, "uuid": "e1d12783-803c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.249.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727749624, "uuid": "a5927b99-7f9c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.250.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727812383, "uuid": "c514bd3c-802e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.254.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727748664, "uuid": "698bee12-7f9a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.29.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784244, "uuid": "40dcdba3-7fed-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.7.2", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727809024, "uuid": "f2dc745d-8026-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.7.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800444, "uuid": "f9274fda-8012-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.105.194", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727764743, "uuid": "d99ce3a9-7fbf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.114.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727744165, "uuid": "efaef9d6-7f8f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.120.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727763124, "uuid": "1434c463-7fbc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.121.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727757065, "uuid": "f90f0195-7fad-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.15.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727777405, "uuid": "54637043-7fdd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.18.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727788207, "uuid": "7ad9078b-7ff6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.209.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784244, "uuid": "40ea8ea1-7fed-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.212.65", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727778963, "uuid": "f5593014-7fe0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.221.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727744284, "uuid": "36ecece1-7f90-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.225.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727818806, "uuid": "b94b453e-803d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.247.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805783, "uuid": "675e67e3-801f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.251.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727773445, "uuid": "1c35b7bb-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.6.150", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727786343, "uuid": "23f448a5-7ff2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.232.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727801644, "uuid": "c4179598-8015-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.233.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727821684, "uuid": "6cb0d6d7-8044-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.238.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727825344, "uuid": "f24ac6ce-804c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.250.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727747523, "uuid": "c1850148-7f97-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.243.183.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805783, "uuid": "675ea951-801f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.243.241.247", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727814844, "uuid": "8004df9a-8034-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.243.244.161", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742846, "uuid": "dda3b97f-7f8c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.243.245.77", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727746445, "uuid": "3ebfdcec-7f95-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.243.253.59", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727827144, "uuid": "235b1352-8051-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.243.254.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727771224, "uuid": "f01f96a4-7fce-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.1.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727745605, "uuid": "4a72174c-7f93-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.198.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742424, "uuid": "e234d567-7f8b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.212.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727762583, "uuid": "d21cc680-7fba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.222.158", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727766964, "uuid": "05527e1f-7fc5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.231.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800266, "uuid": "8ebf28e1-8012-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.249.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727753525, "uuid": "baebbf07-7fa5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.24.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727802244, "uuid": "29c9c6aa-8017-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.21.34", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727825164, "uuid": "873b8f62-804c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.251.173.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727748243, "uuid": "6eb68ead-7f99-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.251.174.8", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727745605, "uuid": "4a70dd3a-7f93-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.115.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727765523, "uuid": "aa57dfaf-7fc1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.121.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727744106, "uuid": "cca538b7-7f8f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.162.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760783, "uuid": "a148992b-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.169.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727764684, "uuid": "b64a26dd-7fbf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.172.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727822944, "uuid": "5bbe3c20-8047-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.193.249", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727770744, "uuid": "d25fc0e3-7fcd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.102.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727791444, "uuid": "0434f1bc-7ffe-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.108.99", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784244, "uuid": "40dcf20a-7fed-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.144.33", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727765823, "uuid": "5d2c9f70-7fc2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.146.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727788744, "uuid": "baed8284-7ff7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.162.142", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758805, "uuid": "064ecfd6-7fb2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.175.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727791143, "uuid": "514d1fa0-7ffd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.204.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727766363, "uuid": "9f2cede3-7fc3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.214.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727818444, "uuid": "e1d14ec1-803c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.221.59", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760484, "uuid": "ee945b2f-7fb5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.48.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727778305, "uuid": "6cbc2f46-7fdf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.6.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754244, "uuid": "677340fd-7fa7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.7.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756705, "uuid": "225f0235-7fad-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.97.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727775065, "uuid": "e1ccb379-7fd7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.98.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727826423, "uuid": "758d5296-804f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.101.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760243, "uuid": "5f81395b-7fb5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.161.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760306, "uuid": "84ab929c-7fb5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.171.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727814905, "uuid": "a4258318-8034-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.178.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727777523, "uuid": "9aec1af3-7fdd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.97.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727781544, "uuid": "f78be08c-7fe6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.98.186", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727774405, "uuid": "586d9395-7fd6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.179.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727749564, "uuid": "81db8a99-7f9c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.180.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754843, "uuid": "ccaf9d39-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.185.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727776864, "uuid": "11e27284-7fdc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.187.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727794984, "uuid": "4234ab2f-8006-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.188.181", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751724, "uuid": "897e63f0-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.65.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727813944, "uuid": "67847305-8032-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.214.236", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727763543, "uuid": "0e71248b-7fbd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.180.79.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727814964, "uuid": "c732ab6c-8034-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.240.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751844, "uuid": "d0f98b64-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.231.220.174", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727749865, "uuid": "35b80431-7f9d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.236.194.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727741643, "uuid": "10e92d96-7f8a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.56.10.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727806984, "uuid": "33016639-8022-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.56.8.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727815743, "uuid": "9806e352-8036-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.57.89.221", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727783343, "uuid": "280c92d7-7feb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.60.239.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751305, "uuid": "8f7f4bb0-7fa0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.170.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727799544, "uuid": "e075de8e-8010-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.18.143", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727808004, "uuid": "9348eeb7-8024-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.198.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727750283, "uuid": "2eabdb37-7f9e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.201.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727764923, "uuid": "44ce65d6-7fc0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.204.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751124, "uuid": "23ba166c-7fa0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.207.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727746384, "uuid": "1aad2ed7-7f95-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.247.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727755024, "uuid": "3850ac63-7fa9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.30.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727763543, "uuid": "0e714984-7fbd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.77.200", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727770744, "uuid": "d25f85aa-7fcd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.9.34", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727806024, "uuid": "f690246d-801f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.62.61.237", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727777824, "uuid": "4e106e80-7fde-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.138.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727825164, "uuid": "873ba10f-804c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.241.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727792944, "uuid": "827e69e8-8001-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.204.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727824024, "uuid": "df694c77-8049-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.133.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727825224, "uuid": "aacca59f-804c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.79.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727780943, "uuid": "91a81f9f-7fe5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.156.30.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727743984, "uuid": "83efd32f-7f8f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.175.101.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727820784, "uuid": "54342272-8042-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.12.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727762223, "uuid": "fbadb063-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.159.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727757964, "uuid": "109f28a4-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.20.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727823784, "uuid": "50ad2303-8049-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.114.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727816644, "uuid": "b09eb641-8038-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.132.110", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727827084, "uuid": "ff68705a-8050-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.134.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727766123, "uuid": "103b43cb-7fc3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.159.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727799063, "uuid": "c1d119d3-800f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.181.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727786224, "uuid": "dcfbc833-7ff1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.240.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727823605, "uuid": "e618b20e-8048-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.22.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727788024, "uuid": "0e02be4b-7ff6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.244.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727822644, "uuid": "a8f829de-8046-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.150.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727824024, "uuid": "df6934d5-8049-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.95.18.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727779324, "uuid": "cc28de2a-7fe1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.95.42.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727798883, "uuid": "56a7313c-800f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.54.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727815743, "uuid": "9806de41-8036-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.19.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754783, "uuid": "a9166863-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.38.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751605, "uuid": "425fd906-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.48.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784723, "uuid": "5e9066bf-7fee-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.27.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758205, "uuid": "a0783e30-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "128.65.199.135", "Tag": [ { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761624, "uuid": "964b0407-7fb8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "134.19.177.44", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727819164, "uuid": "8eb00273-803e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.153.146.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727783405, "uuid": "4cf74e5a-7feb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "141.98.11.122", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804106, "uuid": "7f7b2b80-801b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "152.89.170.31", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811424, "uuid": "894f8e21-802c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.213.190.194", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727812206, "uuid": "5b63994f-802e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.216.19.140", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805305, "uuid": "4a172ea2-801e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.216.20.53", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800623, "uuid": "63cbb02a-8013-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "157.10.45.143", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727786705, "uuid": "fbcdde80-7ff2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "157.20.182.66", "Tag": [ { "name": "dropped-by-PrivateLoader", "colour": "#769880", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804944, "uuid": "7307c433-801d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "162.240.239.101", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727748423, "uuid": "d9d98d0c-7f99-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "164.177.177.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804944, "uuid": "730678a4-801d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.104.243.228", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758205, "uuid": "a0791a77-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "173.249.208.143", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751844, "uuid": "d0f9e090-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.107.36.247", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727794984, "uuid": "4233de45-8006-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.107.37.22", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751844, "uuid": "d0f98bb6-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.107.37.37", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751783, "uuid": "ace93ec6-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.107.9.199", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727749624, "uuid": "a5928744-7f9c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.219.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727792344, "uuid": "1ca5f811-8000-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.158.119", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727799544, "uuid": "e075f6c8-8010-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.151.177.248", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727753224, "uuid": "074d97f5-7fa5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.151.82.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727793723, "uuid": "530d790f-8003-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.44.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727821384, "uuid": "ba27dadb-8043-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.167.87.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727789943, "uuid": "85edff6c-7ffa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.151.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727773445, "uuid": "1c29cc58-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.239.61", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805783, "uuid": "675fd99f-801f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.30.110.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727748843, "uuid": "d463cdd9-7f9a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.110.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727814244, "uuid": "1a0a444d-8033-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.206.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805783, "uuid": "675e9c92-801f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "179.80.73.150", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751844, "uuid": "d0fa7e6d-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "179.87.72.208", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727770805, "uuid": "f6f2fcc1-7fcd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.107.89.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727773445, "uuid": "1c2a52e0-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.94.34.83", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727763844, "uuid": "c17a90fb-7fbd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.218.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759643, "uuid": "f9ce2093-7fb3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.244.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727748243, "uuid": "6eb6a4f3-7f99-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.203.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727753824, "uuid": "6d2470d3-7fa6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.251.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727783343, "uuid": "280cafc2-7feb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.50.104", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727825585, "uuid": "81cd1286-804d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.77.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782744, "uuid": "c2a8da3a-7fe9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.119.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727746864, "uuid": "38737c62-7f96-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.14.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758864, "uuid": "2912fa48-7fb2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.74.208", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782506, "uuid": "34c9926e-7fe9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.134.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727816584, "uuid": "8cf0b2d2-8038-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.68.232", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727793605, "uuid": "0c7290f4-8003-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.78.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727816584, "uuid": "8cf0a60e-8038-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.84.173", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727748664, "uuid": "698c155a-7f9a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.118.155.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727743505, "uuid": "667f114b-7f8e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.178.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727825224, "uuid": "aacc953a-804c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.49.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727785143, "uuid": "590709fe-7fef-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.118.115", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727767324, "uuid": "dbb011fc-7fc5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.158.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727772605, "uuid": "27c7210b-7fd2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.180.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727765644, "uuid": "f247e479-7fc1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.103.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727822884, "uuid": "37ea76cf-8047-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.66.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727762583, "uuid": "d21cb5a4-7fba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.91.63", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727821143, "uuid": "2a8c38a2-8043-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.103.195", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727776384, "uuid": "f3d8c0fb-7fda-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.109.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727773806, "uuid": "f320ef82-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.181.146.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727812864, "uuid": "e3b0cda0-802f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.2.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727757543, "uuid": "16181c19-7faf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.157.12.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759944, "uuid": "acc482bc-7fb4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.17.231.9", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727767743, "uuid": "d5d6d55e-7fc6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.248.12.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727773445, "uuid": "1c29e972-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.112.100.185", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727747704, "uuid": "2d5638ab-7f98-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.77.58.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751844, "uuid": "d0fa3efb-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "197.204.200.176", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727794984, "uuid": "42348927-8006-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.110.29.2", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727771466, "uuid": "8063e9c3-7fcf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.208.138.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727816644, "uuid": "b09c8c62-8038-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.170.201.163", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727773445, "uuid": "1c285a9c-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.170.201.227", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784244, "uuid": "40e15b60-7fed-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.170.201.247", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727741823, "uuid": "7c412460-7f8a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.59.13.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727766064, "uuid": "ecebaefe-7fc2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.134.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727776204, "uuid": "88f4c8c6-7fda-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.4.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727757964, "uuid": "109f3820-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.109.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756224, "uuid": "037fc05e-7fac-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.96.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727766663, "uuid": "521b016a-7fc4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.20.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742608, "uuid": "4fbcb70c-7f8c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.32.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727773445, "uuid": "1c332c61-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.158.158.182", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727773445, "uuid": "1c2c3bb3-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.158.158.21", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727741044, "uuid": "ab7d5509-7f88-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.158.158.212", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784244, "uuid": "40df47fc-7fed-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.158.159.83", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727746804, "uuid": "151e36eb-7f96-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.201.156.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758024, "uuid": "34501ec7-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.178.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727824506, "uuid": "fefdea42-804a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.36.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727747105, "uuid": "c84b196d-7f96-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.88.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727749564, "uuid": "81db70f1-7f9c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.133.67.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727767743, "uuid": "d5d6c3c2-7fc6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.136.171.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727772783, "uuid": "91e7b4bd-7fd2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.140.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727747343, "uuid": "5678b3af-7f97-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.79.198", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751783, "uuid": "ace9450e-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.15.227", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758924, "uuid": "4cee59df-7fb2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.180.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758444, "uuid": "2ede062b-7fb1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.13.58.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727769605, "uuid": "2b88aa4e-7fcb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "24.75.160.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784244, "uuid": "40ea2bd0-7fed-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.122.61.59", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727795643, "uuid": "cb7ed73d-8007-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.193.238.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727765106, "uuid": "b1c2a8b0-7fc0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.101.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727779624, "uuid": "7eee86b1-7fe2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.102.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727774283, "uuid": "0fea15a3-7fd6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.103.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727783223, "uuid": "e09024ec-7fea-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.103.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754664, "uuid": "61bb7113-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.103.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727821143, "uuid": "2a8c3c2e-8043-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.108.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817306, "uuid": "3b79561d-803a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.108.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727763483, "uuid": "ea60518f-7fbc-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.109.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727775963, "uuid": "f9042ba9-7fd9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.176.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805783, "uuid": "675e8a65-801f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.176.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727792406, "uuid": "41b1b23a-8000-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.176.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727745424, "uuid": "de827c21-7f92-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.176.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756164, "uuid": "dfae61c3-7fab-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.177.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727799306, "uuid": "526fe251-8010-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.178.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727790364, "uuid": "807c69a3-7ffb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.178.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727793905, "uuid": "bf38f887-8003-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.178.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727796845, "uuid": "97b2da56-800a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.180.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727825824, "uuid": "10a639a2-804e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.206.82.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727812444, "uuid": "e9290fb6-802e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.183.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784723, "uuid": "5e906a6d-7fee-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.230.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758143, "uuid": "7bb8fdfe-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.80.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727786107, "uuid": "975980d1-7ff1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.71.16.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727816644, "uuid": "b09cbb20-8038-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.204.77", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784244, "uuid": "40e69adb-7fed-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.80.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756584, "uuid": "da61c2ca-7fac-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.107.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804706, "uuid": "e523244a-801c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.20.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727745664, "uuid": "6d6ed0f3-7f93-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.227.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727795523, "uuid": "83c7ff24-8007-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.95.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727769183, "uuid": "2ffc1ad5-7fca-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.99.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727819583, "uuid": "88c9cf91-803f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.179.153.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727777643, "uuid": "e2ab244c-7fdd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.180.237.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727748423, "uuid": "d9d99d9c-7f99-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.180.34.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727757009, "uuid": "d76ad4b9-7fad-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.180.45.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727741044, "uuid": "ab7de475-7f88-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.109.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727767925, "uuid": "41f7192e-7fc7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.148.239", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727743144, "uuid": "8f57d56d-7f8d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.172.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727824564, "uuid": "219a10cb-804b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.188.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751063, "uuid": "ffa06140-7f9f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.195.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742846, "uuid": "dda3778e-7f8c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.223.142", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784305, "uuid": "657201a0-7fed-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.218.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727818683, "uuid": "7056141e-803d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.40.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727748843, "uuid": "d463e228-7f9a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.112.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727773445, "uuid": "1c283c79-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.117.117", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727774643, "uuid": "e65f63c3-7fd6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.52.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727807644, "uuid": "bc26c926-8023-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.236.223.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727816644, "uuid": "b0a011ad-8038-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.56.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727745543, "uuid": "25613f60-7f93-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.7.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727774163, "uuid": "c84c11f0-7fd5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.52.82.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727766663, "uuid": "521aa8e8-7fc4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.213.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727823844, "uuid": "7436d80b-8049-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.244.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727775245, "uuid": "4cde9012-7fd8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.244.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756164, "uuid": "dfae0a8f-7fab-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.139.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727768464, "uuid": "8326b864-7fc8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.17.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727741044, "uuid": "ab7e5966-7f88-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.140.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727803323, "uuid": "acff42b9-8019-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.242.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751844, "uuid": "d0f9080c-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.115.89.194", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727762164, "uuid": "d82e1cbc-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.200.148.113", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804944, "uuid": "73064c2a-801d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.89.247.80", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782564, "uuid": "576d9aa9-7fe9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.236.65.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758263, "uuid": "c333ae07-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.59.249.232", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751844, "uuid": "d0fa1df7-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.255.45.237", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817606, "uuid": "eded9f39-803a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.59.153.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754783, "uuid": "a91648e3-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.59.153.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727821505, "uuid": "026360fb-8044-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.158.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727809384, "uuid": "c971d9e9-8027-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.182.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727765523, "uuid": "aa57f236-7fc1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.187.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727792884, "uuid": "5e8a79fb-8001-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.190.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727745364, "uuid": "bad6fe5f-7f92-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.191.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727746864, "uuid": "38738b5a-7f96-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.34.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727794205, "uuid": "7238c43d-8004-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.76.179", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727815805, "uuid": "bcd0c247-8036-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.140.78", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727797505, "uuid": "2110c287-800c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.189.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727789645, "uuid": "d40ab54e-7ff9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.130.83", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761743, "uuid": "dd7773dc-7fb8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.131.67", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727803205, "uuid": "66858077-8019-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.138.101", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727773445, "uuid": "1c388155-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.152.243", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804944, "uuid": "730629cf-801d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.156.37", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727780164, "uuid": "c1385b6a-7fe3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.159.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811185, "uuid": "fb09da53-802b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.227.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727816584, "uuid": "8cf0c35c-8038-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.81.92", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727826605, "uuid": "e22f5621-804f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.87.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727771284, "uuid": "143602ac-7fcf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.89.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805843, "uuid": "8b0b29df-801f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.90.78", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727781244, "uuid": "44c0c3d3-7fe6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.91.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727794806, "uuid": "d8451c40-8005-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.95.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817605, "uuid": "eded89f5-803a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.100.18", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727764564, "uuid": "6ea4f2f4-7fbf-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.103.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727748124, "uuid": "2791a11e-7f99-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.104.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727771763, "uuid": "31b92d74-7fd0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.108.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727779806, "uuid": "eb75b8e9-7fe2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.110.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727748243, "uuid": "6eb698d4-7f99-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.113.179", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756944, "uuid": "b0a0f721-7fad-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.117.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727741044, "uuid": "ab856324-7f88-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.119.27", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727810583, "uuid": "94763387-802a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.119.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727755923, "uuid": "5091f76f-7fab-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.120.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727816584, "uuid": "8cf0f2a9-8038-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.120.226", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727820543, "uuid": "c4cc065c-8041-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.127.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727812923, "uuid": "072573a2-8030-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.127.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784664, "uuid": "3aff46bd-7fee-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.130.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727775783, "uuid": "8dd293af-7fd9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.131.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727743984, "uuid": "83efe249-7f8f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.134.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754964, "uuid": "1465cca4-7fa9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.134.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758983, "uuid": "704a6501-7fb2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.135.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727773683, "uuid": "aa4f3f42-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.138.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727765164, "uuid": "d4207f5e-7fc0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.244.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758924, "uuid": "4cee7079-7fb2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.245.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727744465, "uuid": "a280f330-7f90-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.246.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751844, "uuid": "d0fa4329-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.246.80", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751844, "uuid": "d0f929ee-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.254.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727790544, "uuid": "ebefc5f2-7ffb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.50.84", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761023, "uuid": "302bd401-7fb7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.56.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727821984, "uuid": "1fbead10-8045-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.78.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754244, "uuid": "67733774-7fa7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.187.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727816284, "uuid": "da0e4376-8037-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.226.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727765823, "uuid": "5d2cb05f-7fc2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.253.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727795043, "uuid": "65c0fd07-8006-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.3.200", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727801222, "uuid": "c8a840f6-8014-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.11.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727767324, "uuid": "dbb01d1c-7fc5-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.13.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727765106, "uuid": "b1c2a917-7fc0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.13.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727786107, "uuid": "97597c9a-7ff1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.14.44", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805244, "uuid": "25ccf10f-801e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.15.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727817243, "uuid": "160d130e-803a-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.2.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727789645, "uuid": "d40aca4e-7ff9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.71.65", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727767925, "uuid": "41f7024e-7fc7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.167.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727804045, "uuid": "5b03394e-801b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.166.202", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805843, "uuid": "8b0b190c-801f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.205.114", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727746384, "uuid": "1aad4a35-7f95-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.146.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727767564, "uuid": "6a94a52d-7fc6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.229.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758205, "uuid": "a07b63e6-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.234.146", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742183, "uuid": "52d60a40-7f8b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.90.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727823364, "uuid": "5618534d-8048-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.129.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727813343, "uuid": "018f1a02-8031-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.129.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727762643, "uuid": "f5fc965d-7fba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.216.15", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727801043, "uuid": "5dffc5d3-8014-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.114.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782385, "uuid": "eced4440-7fe8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.114.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754843, "uuid": "ccaf4de9-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.117.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727773264, "uuid": "b0709bce-7fd3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.118.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758684, "uuid": "bdb2701c-7fb1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.120.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727766363, "uuid": "9f2ce428-7fc3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.123.38", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754484, "uuid": "f66e9b15-7fa7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.125.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727819284, "uuid": "d6677223-803e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.125.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800564, "uuid": "408d9819-8013-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.126.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784244, "uuid": "40e0e837-7fed-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.126.132", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727802006, "uuid": "9bf183ca-8016-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.167.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727747105, "uuid": "c84b14f6-7f96-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.198.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727751844, "uuid": "d0fa4efd-7fa1-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.102.198", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800507, "uuid": "1e937d8c-8013-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.131.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805905, "uuid": "afc6a2d6-801f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.208.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727752024, "uuid": "3c085652-7fa2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.220.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727788506, "uuid": "2d1651bc-7ff7-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.223.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727750283, "uuid": "2eabd44e-7f9e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.57.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727752805, "uuid": "0e032863-7fa4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.60.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727806864, "uuid": "eb637e06-8021-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.251.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727756944, "uuid": "b0a112c5-7fad-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.22.142.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727826843, "uuid": "70322a90-8050-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.22.192.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727790184, "uuid": "156e8c86-7ffb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.22.87.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727790184, "uuid": "156e9bfc-7ffb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.128.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727757244, "uuid": "63eb93a7-7fae-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.232.153", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727781544, "uuid": "f78bc98f-7fe6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.238.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727782623, "uuid": "7ac9b8a8-7fe9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.73.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727805783, "uuid": "675e4cd8-801f-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.179.210", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727807408, "uuid": "2f872e41-8023-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.179.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727754783, "uuid": "a916415f-7fa8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.182.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727741044, "uuid": "ab829ed8-7f88-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.183.173", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761564, "uuid": "7267e61a-7fb8-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.187.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727826904, "uuid": "94863e8a-8050-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.187.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727767564, "uuid": "6a94b264-7fc6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.61.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727745605, "uuid": "4a731d23-7f93-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.228.130", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811784, "uuid": "5fd30b97-802d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.133.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727763785, "uuid": "9e22d6a3-7fbd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.143.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727774463, "uuid": "7b32921a-7fd6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.206.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727802305, "uuid": "4dec21f2-8017-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.207.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727744465, "uuid": "a2810335-7f90-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.2.146.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727797683, "uuid": "8b7c538a-800c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.100.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727773445, "uuid": "1c2d7e8a-7fd4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.129.51", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727763664, "uuid": "561103f5-7fbd-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.132.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727753044, "uuid": "9c175a41-7fa4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.141.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727823844, "uuid": "7436ec31-8049-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.141.34", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727799544, "uuid": "e075ee35-8010-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.17.163", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727758266, "uuid": "c4a85b92-7fb0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.17.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727785684, "uuid": "9b0e3386-7ff0-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.25.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727821744, "uuid": "909ca1b4-8044-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.31.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727746024, "uuid": "43e4fbae-7f94-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.84.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727776683, "uuid": "a661058c-7fdb-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.96.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727825409, "uuid": "18e4e9c5-804d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.96.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727753044, "uuid": "9c175e70-7fa4-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.97.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727769064, "uuid": "e8a808e7-7fc9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.219.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727757366, "uuid": "ac3692e0-7fae-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.3.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727757244, "uuid": "63eb87af-7fae-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.75.131", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742183, "uuid": "52d60dc1-7f8b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.104.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727762583, "uuid": "d21ca950-7fba-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.118.209", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727820543, "uuid": "c4cc0349-8041-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.72.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759045, "uuid": "94e5d037-7fb2-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.92.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727784124, "uuid": "f937251d-7fec-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.97.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727790006, "uuid": "ab68755c-7ffa-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.253.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727797983, "uuid": "3e13d24c-800d-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.40.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727812206, "uuid": "5b640e76-802e-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.63.187.216", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727759344, "uuid": "4724b0ea-7fb3-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.105.164.86", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727769064, "uuid": "e8a901de-7fc9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "81.235.12.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727811065, "uuid": "b3c0ea9d-802b-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.92.252.123", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727810106, "uuid": "77d39008-8029-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "93.123.85.210", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1727800623, "uuid": "63cbd154-8013-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.156.68.181", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1727818325, "uuid": "9a7ef26c-803c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "cyunj.shades.whatisaweekend.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760611, "uuid": "3a87a21a-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "down.lianfamedical.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1727760609, "uuid": "398b776a-7fb6-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "himb.shades.whatisaweekend.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1727742544, "uuid": "29ae90a1-7f8c-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "lmhyt.shades.whatisaweekend.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1727761924, "uuid": "48fb519d-7fb9-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "menyos.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1727746143, "uuid": "8b05c1ed-7f94-11ef-afe5-82aee05be84a", "comment": "Malware payload delivery host", "value": "tcgeo.shades.whatisaweekend.com" } ] } }