{ "Event": { "published": true, "date": "2026-02-22", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-02-22", "timestamp": 1771805721, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "4846f1dd-671b-4dd8-86c9-b70e5f406d23", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56d34534-0f86-11f1-8369-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1771720508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771720508, "uuid": "d99a53a4-be63-49da-9a38-d9ea0f991f2c", "comment": "Malware payload (Vidar)", "value": "31cae31577ae0648eba8c79a84cace9c", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771720508, "uuid": "73f6668f-f724-4715-ab80-23239d9691a4", "comment": "Malware payload (Vidar)", "value": "b384ba0ad39c09ffe564ba247aef3223d6bf50ca3fc92201db4ed67ad0a1a4d2", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771720508, "uuid": "7f0a38a3-e10a-448c-a4bd-76cb117d9cdb", "value": "T17D24236ADB531E23FC6701741929F705F553686A2F7E472738346B8962ECD8ACB483", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771720508, "uuid": "79666dfa-e666-4d1b-9bfe-4e55e9e51278", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771720508, "uuid": "abee97a1-41b5-4e0d-99fb-510a163823b2", "value": "3072:EX7TDNLfd0IuGsNgUIlcLds5GQ/cnb7Ukd93ApqAamXlrKpxSI9mTTs7YpM1SKt5:u71x02XrkdsEQ/EPld5AgBuWp+QYpOt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771720508, "uuid": "78af7b8a-61e7-4cc4-8ea6-13cafd3595d1", "value": 217088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771720508, "uuid": "498be580-1864-4926-ab63-4dbb61788889", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95700f6b-0f86-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771720613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771720613, "uuid": "7350f572-e39e-4e54-aeda-94ae829bf846", "comment": "Malware payload", "value": "884bc1a0bad26413ed445e004a4a5618", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771720613, "uuid": "7cb8ef5a-307b-4b3d-93b7-89b4ac311d71", "comment": "Malware payload", "value": "c55564631119a0d984030284831f7219b677c447a88c89e745f3856c2e8f5da8", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771720613, "uuid": "20b8ef24-85b7-4200-bc4f-c479845c66b1", "value": "T193A52342F8C485F3C4511C331B65A7616A7DBE202F268EDBB3856B1DE9614D0EB31A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771720613, "uuid": "597d7516-38da-4e6a-a842-81347dba6d6e", "value": "12e12319f1029ec4f8fcbed7e82df162", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771720613, "uuid": "3bc44033-0e9e-45de-bf8e-1973ad6fdd30", "value": "49152:ABRhTpc8iYM5pF9UBB6jdLXsuuX4/cqZIiQx6lSONx:a/TFM5pXUBB6BLXTuoEXx6lSONx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771720613, "uuid": "14173852-7fba-4c60-8033-880f3c1b3290", "value": 2110512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771720613, "uuid": "ada1f51a-dd29-4868-8f1a-7da4d44793cf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6e720e8-0f08-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1771722244, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771722244, "uuid": "5ec2cac4-4c11-483f-baed-a2b51c8121de", "comment": "Malware payload (CoinMiner)", "value": "a20727b81b50a20483ba59ae65443dfe", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "i-frame", "colour": "#eaf934", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "sality", "colour": "#dbe48b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771722244, "uuid": "6360bb5d-4f03-4f73-b20a-7e35cb3119f0", "comment": "Malware payload (CoinMiner)", "value": "af94ddf7c35b9d9f016a5a4b232b43e071d59c6beb1560ba76df20df7b49ca4c", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "i-frame", "colour": "#eaf934", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "sality", "colour": "#dbe48b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771722244, "uuid": "38a51c13-9702-4f25-acd8-825405549a63", "value": "T167563362F440E436E038203925F684A6B17DFD7347254A8B73A93A364D793D836BDB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771722244, "uuid": "6ee70aa1-6974-4b4e-8194-ce4bb948f125", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771722244, "uuid": "41ec0194-41c4-4c10-b1f6-8901ca387005", "value": "98304:RLGSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6Ty3RvX+Y2naq8le+:YBfTCiUswVSLOJgyBG/aW+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771722244, "uuid": "ed6e1c68-7956-4a4d-a575-afd03158f9d4", "value": 6271259, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771722244, "uuid": "a2499d37-9883-4f70-b181-be7ec5e58cae", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ff221bf-0f8b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771722590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771722590, "uuid": "33250212-cdd9-47e0-b2fa-5057c4ff520f", "comment": "Malware payload", "value": "c86ab9f1cf0ad8f2e25fde7d93c643d1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771722590, "uuid": "e0eb7272-d8fd-43af-a0c2-5d73f86aa308", "comment": "Malware payload", "value": "38ad348ccc24a2b70f902a16a20e4340e8588e4302b2da4590c2bd6c98b306ee", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771722590, "uuid": "ecf58e77-cfa1-42df-b655-2723ef8d3a52", "value": "T1138309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771722590, "uuid": "f6721a0b-1f5b-46c2-85dd-5c57e21ce885", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnwWaVVN/:XEKltp9txAX/yr2pbwWgVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771722590, "uuid": "1cdcbfc0-d105-4884-b9aa-2dd43fd32b2c", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771722590, "uuid": "4a6c9dca-5e68-4c2d-ada6-7a99ec444b0f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82258501-0eee-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771722828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771722828, "uuid": "1179c3e8-6cc1-4a57-9063-0e9df1fb62b9", "comment": "Malware payload (Mirai)", "value": "70865d4e71a06033b89bc8ed186ffb7b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771722828, "uuid": "ba05f435-6fe1-4b2c-8904-1c56db6533a2", "comment": "Malware payload (Mirai)", "value": "f10037af48312323111ce1a262bdbcd5a135043cb05300b0aa9d0d35ff6319ed", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771722828, "uuid": "43e1cec0-4c6f-44c2-8c40-5ce846240cb0", "value": "T15163027EF707D8DD34302E76F89AEA0A25E40CB9CFAF7A9641101E207EC3E4151653", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771722828, "uuid": "228e8d2c-33f9-4a4e-944b-19388728ab6d", "value": "1536:IU3Bp2NvAdO9spSBKC5pOJzYFmQyLR4SraHLG8gZNq:IUKNodhMBKCIQyLRLraHLG8wq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771722828, "uuid": "07fe868b-3ec2-4403-80b2-a2c2683f5b75", "value": 67412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771722828, "uuid": "55ec4f1f-b323-431b-9b38-99ab15f7d67a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16700dde-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771722857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771722857, "uuid": "51eb5f7c-4c15-4af6-a95c-12b7b9f679ed", "comment": "Malware payload", "value": "e7acf29a52dd9c0f04cf2cb5f463bdf5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771722857, "uuid": "8f7bbe07-a80b-4e10-894a-53e35f191310", "comment": "Malware payload", "value": "4952024944397f022d24740ddaa55e415c88ff8c67edf990df9d0583b4809a6c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771722857, "uuid": "0036a896-495a-4306-9d0b-45de87e3e93d", "value": "0D23029223A53F72D52148F8D7BCEF8A614A7E54EFE6181FBC113A94B47135C28C981E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771722857, "uuid": "5dfd2582-0c54-4eee-802c-3c4e89658c64", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsDm1XZ:yYI0ARqw1qAEW67UIWi7M8gmfmJZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771722857, "uuid": "2c1f67d4-8e85-4ca2-ad62-041a28eff304", "value": 46336, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771723042, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771723042, "uuid": "954d0745-21e4-41ea-8844-d19cf62bfcc1", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771723042, "uuid": "6b667f8e-a146-45e2-b398-beb44a551241", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771723042, "uuid": "37c06fa4-518b-4a8c-aa80-4b581a6d3bb6", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771723042, "uuid": "c39bb89f-3326-4d5a-b842-55fb3f1abb15", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771723042, "uuid": "5cbd6224-062f-428f-a3a6-11d0d5aafef9", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1771723524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771723524, "uuid": "03911ed1-9bd8-4d37-8bf7-f91051cb633e", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771723524, "uuid": "109ba570-8cf4-4f67-b761-0e72f24aa821", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771723524, "uuid": "33e6c740-3dbd-4b6d-8cbb-8309684de5a3", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771723524, "uuid": "ec97fe3b-c34a-4d43-bb9b-f9c3f59cf67e", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771723524, "uuid": "9ccaceb1-603e-470e-a2e9-37d224a1aa7b", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61d473aa-0f8e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771723962, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771723962, "uuid": "602ffc47-b7b4-48cf-9865-b6e0b8610e67", "comment": "Malware payload (Mirai)", "value": "298eb35ed0cacd76d7279d8a4315a758", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771723962, "uuid": "9d5d4fcc-f8b5-4602-8c5e-ecc1cdf7da5c", "comment": "Malware payload (Mirai)", "value": "a774b70d943f5ebb70aabc83be313d4bfda3746074de194c0047e1583c8335a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771723962, "uuid": "20524c06-d011-45d2-a949-d97663486f90", "value": "T10AA35C85F747E1F4E94909B011ABF73A8631DC371014DDABEB94FE72BD22642A11A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771723962, "uuid": "e33ac6b5-32a9-4335-b29e-5aef6f9472b0", "value": "1536:J1hQ2dgBnd4rFROszWnboM8htnzDxtoV0/htkUv31QwMgaJkr:JfQlBnWLWnbo1vImfuvgGM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771723962, "uuid": "9e99e80d-80c7-427c-a0ef-29c172da977a", "value": 99572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771723962, "uuid": "793ff9e8-7039-4c28-abec-12c47162ca0e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c2fa5df-0f8f-11f1-8369-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1771724302, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771724302, "uuid": "c18f87d5-cd91-454b-92e3-920778e47645", "comment": "Malware payload (RemcosRAT)", "value": "3e2d917929fdf6bb434ef6ef548557ce", "object_relation": "md5", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771724302, "uuid": "a09334aa-0f46-4037-8577-d1367d920c2e", "comment": "Malware payload (RemcosRAT)", "value": "bb069ae21ea35f433754f782cc0b4d2e8334e2e2ea435c2a5de49b6efe7a371e", "object_relation": "sha256", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771724302, "uuid": "61e9cdf8-0ffc-427d-b884-265bf74b6aa1", "value": "T13E96125045B35BC788324E9FCAFCA1C5BA31477FD84B8559B4BDC7DB8A8629E31A07", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771724302, "uuid": "30fb61d5-7510-4737-ac2b-43836719a9c5", "value": "3072:lh2tjJryxEZAjM3LbQbawLbNAaL/FRZAZr:lh2/bbQhbNAaRZAZr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771724302, "uuid": "d320aef0-ba3b-4112-ad17-64157cd198ea", "value": 9024191, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771724302, "uuid": "630c3364-aff8-4f52-96df-564963199b2f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0002875-0f90-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771724925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771724925, "uuid": "6c453f8f-2833-4b18-a167-1cd969424154", "comment": "Malware payload (Mirai)", "value": "36f9d5c726233ac35f1a4d58b6032ad4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771724925, "uuid": "412f4dd2-9d6a-485a-9260-ac3e70daf22c", "comment": "Malware payload (Mirai)", "value": "8dab2697dd22b6ee54fe70e1797811cce578b271753e17b79699cfb81b09df58", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771724925, "uuid": "14ce83f7-b42b-44a1-a596-3126bf37ef82", "value": "T146C3AE83F78B14A0C4A206F007C74BBE2B93A121CE5F98E37D5DB53B5A7A4DB09163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771724925, "uuid": "7fc70274-bb52-4d27-8065-3a3bf2e47160", "value": "1536:VKy2Ztnejju0QNEVQVCWxZQWaOcOQijlkPhJSqzYjxIRKQig4RQM//LWM:YHtejjuNkQcWZ3eOQOYhIqzYCigO/q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771724925, "uuid": "1967a5a2-7b66-4de2-b1de-a82b352cf56a", "value": 124704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771724925, "uuid": "edf6233b-d870-42b2-a61d-1cf7abaa8ebf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771726882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771726882, "uuid": "45c6ee63-bc6e-430b-b575-0cfde67c52dd", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771726882, "uuid": "a3ab1f18-7972-4497-a5b3-aa0e7ae9ba78", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771726882, "uuid": "03c2f9a1-ece6-4938-9ef0-e7b9fca71fdb", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771726882, "uuid": "d275c8d9-a34e-48f1-84ae-7010cafd7f0a", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771726882, "uuid": "51242d0e-d61c-4227-b31a-54c2ae2bc760", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1771728018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771728018, "uuid": "61665c1b-72f5-4ed9-bbee-9f561d30a0ba", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771728018, "uuid": "0a6ab941-cdd6-4c9e-bd7c-e0ddd691ba35", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771728018, "uuid": "58525cf6-faf3-4bb8-80e4-4c745aebf579", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771728018, "uuid": "7e98d4b3-e34f-42d5-aeee-90b8248fcf4f", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771728018, "uuid": "3af60679-e43a-4ddc-a653-d956d4e5172e", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "310c6eaf-0fbc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771743637, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771743637, "uuid": "81c28e39-11ad-4007-b5b8-b02e0fb48d86", "comment": "Malware payload (Mirai)", "value": "2f6e0ec4e28d6bd227a8d796ef439358", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771743637, "uuid": "39ce5480-93aa-4fae-ad75-6583b9c63d26", "comment": "Malware payload (Mirai)", "value": "e5ecc2b34bec322665d61d8e0c6e02c64c33ac98f9612b71cd0b114c1f1b4a1b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771743637, "uuid": "c825b39b-ffb2-4470-8dfb-e35c8d935ff1", "value": "T1B3043A46FB408A17C4D61779BA9F42453323DBA4D3EB33069928ABB43F8379E4E635", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771743637, "uuid": "139211b2-960a-4231-b76c-be894c8ed983", "value": "3072:ZK4DBaE2qz02fa+iE9FCgfr5RMPPrIvLSAL/KO+xWu:kaIP2fa+iE9F7fnM3rIvLzL/KO+xWu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771743637, "uuid": "d06870b1-d9b3-4f3d-9574-385f05b983ce", "value": 174843, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771743637, "uuid": "ef407668-9afa-40e0-85b1-e082dc1255e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771744585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771744585, "uuid": "1c10f772-eb24-436d-8b5f-cdf0b9045be6", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771744585, "uuid": "2d0d4c46-3010-48b3-8f64-7cbadc4c9c66", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771744585, "uuid": "c0f9c909-6b41-481e-bca3-0f51d8120727", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771744585, "uuid": "ce6ad9fb-3310-4bc2-8492-6891cbf55afe", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771744585, "uuid": "a31d4ca5-04a0-4299-857a-b6803177a80f", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8627287a-0fc0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771745498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771745498, "uuid": "25e0f189-e4b1-4a4d-970a-c1d5c57349c6", "comment": "Malware payload", "value": "f27ba4ea580f6e36364b16cca543cc80", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771745498, "uuid": "41d01e9e-c829-49bc-be2b-b3d7ab8a53bc", "comment": "Malware payload", "value": "4810ed2944c3783644610ec6137cf540581a8dc348eec1330f83732cc04618e1", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771745498, "uuid": "f318e1f5-ac65-4cec-bbda-f96791e9490b", "value": "T186753382F31CB1AF60767ED31DE36C0A450938998BC7BD1F0999E4D8338E7709969C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771745498, "uuid": "6bb981ff-005c-4f6a-bf4f-a39af6b9d2aa", "value": "49152:5WoRwXC8Tup4uto3dRwyPxJFGlK1MsNr/ngYyAOVi2DPDkD7:5JYC8HuywQGlKrr/ngX5DLkf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771745498, "uuid": "c95d6c1c-f998-432d-b871-5e2fceb8b5e7", "value": 1699813, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771745498, "uuid": "893fce81-3675-44a3-9eff-e0c30c664175", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "766f3855-0fc6-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771748049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771748049, "uuid": "690709e0-cce9-4627-8ba6-a2959d0097b1", "comment": "Malware payload", "value": "d591e8382aad5eb68877f87280bf13fa", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "NetSupportRAT", "colour": "#d30a30", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771748049, "uuid": "00fe17df-1cec-48e2-9dca-4c4ec73ca0d7", "comment": "Malware payload", "value": "8182f2b35b8daaff76aaaefe3861a968cffc750a8ce51cdf4e14f98cd6e3c21e", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "NetSupportRAT", "colour": "#d30a30", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771748049, "uuid": "60100883-277a-4f30-924f-c5ac8d854b40", "value": "T1BFB67C648B84975EAE6F191BE078572F7BF33F66E08271FC46622743256FC046639C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771748049, "uuid": "fb4aace4-8129-449e-abbc-77790c488a61", "value": "49152:9e3VQ3tlAw6B9t7FPkIlyYwEJP4rspFSUZe5CxCmdx:s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771748049, "uuid": "53b91288-0f5f-4333-abd0-9ec3408859bd", "value": 10758388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771748049, "uuid": "2313da95-61ff-4ee5-8476-79fad415fd5b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "776f95d8-0fc6-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771748050, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771748050, "uuid": "257a1cfc-79d6-40d8-802d-f63b51f68ce8", "comment": "Malware payload", "value": "2d6059cfe537892bd9881cca183260ba", "object_relation": "md5", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "password: 2026", "colour": "#a65f14", "exportable": true, "hide_tag": false }, { "name": "pw-2026", "colour": "#4d3d79", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771748050, "uuid": "3482eab9-b4e4-49fc-9f0e-aa3e5fd1aeb1", "comment": "Malware payload", "value": "80b9654c546c942cc9d4dbe1f48f54bb0092514d0f786982f70baa5f48ae646c", "object_relation": "sha256", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "password: 2026", "colour": "#a65f14", "exportable": true, "hide_tag": false }, { "name": "pw-2026", "colour": "#4d3d79", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771748050, "uuid": "feddaea5-89e3-47d7-a9cc-6a8033e21619", "value": "T17B46335862FDA397E4D67C591918D08FEDECA38C8D3EF78310EC5FA71401A02967D8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771748050, "uuid": "48ec2a2b-fad3-40a1-b5b9-d980ecf23bdb", "value": "98304:sC30prMbmLV4S3wW0BWUYF2+Gs57uEl8azp40GO7ONbYQHmKL2IH3Eeho7smg:sC3kZHAW0gpF2+b7rpzpGeON5HTL2Cac", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771748050, "uuid": "80660198-cfca-4459-a79f-b8fddfbd26c2", "value": 5548268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771748050, "uuid": "70f294be-61be-48f7-abd2-bc9cc98d5506", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6b57980-0fca-11f1-8369-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1771749847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771749847, "uuid": "8cd0cad1-e87b-4475-b011-dede8194a12e", "comment": "Malware payload (Vidar)", "value": "a1e6e2d536593b08286e789b1e4f0525", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771749847, "uuid": "4af2039c-4207-454d-a984-fec44e806465", "comment": "Malware payload (Vidar)", "value": "bac9e3ebeb6e4ccd3b6766fabdb8fa16cacb04980c81877ceab8c01f194c5ac2", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771749847, "uuid": "c20d5977-6bff-4002-a1d1-603194bc344a", "value": "T1C7E55C072CE499D5E0AE93359C66D192B7357C084B3037E31B91767A2E3A3C45E37B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771749847, "uuid": "87265302-cc2f-4acc-af3b-9409b7a17d21", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771749847, "uuid": "af7eab04-e716-4c69-990e-d504a672432f", "value": "24576:L3NBfp53L4vcJThtGFKQc1wyXMP2XGJ8iRVN1JI6Ga2aGrS3qhelet29m9cnd4Cy:L3DfjL1ThtO3BbI61aad4CBc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771749847, "uuid": "81565f76-2e52-4632-ae60-4f651a3b8ccd", "value": 3078656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771749847, "uuid": "21a3d071-ac6a-4742-bf47-69de427c7088", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ba8a6c3-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771750097, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750097, "uuid": "c063e03f-111d-4ca0-8961-8a586a9e6d0e", "comment": "Malware payload (Mirai)", "value": "fc453bc95d34da863f4c3d1cbec45df7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750097, "uuid": "237103f2-0f6c-4171-a269-133fe32a571c", "comment": "Malware payload (Mirai)", "value": "49c9a1b4a3f7f5b5badaccf2e837e90c9067b207a5d5ff941f1383a2ee70ccdf", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750097, "uuid": "8e3b11c0-4130-41de-a495-66858274f9db", "value": "T114417F8EB17082C1868CCF4B71F449C67705A693F1F46A72ECC12D7A8899E48356DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750097, "uuid": "38d8aacc-12de-4b73-b81e-52e8955ac414", "value": "24:fzDdl3Cw14HCnvBM/hb1m1bEZ1O2wOxx6fnZOo7PCgK+CZJwCR42C5HZ:ff3Cw14HCSBVZXMZOo7PCyCMCfCb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771750097, "uuid": "5a7773b1-618b-4547-a07c-ed2c45c49cf9", "value": 1887, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750097, "uuid": "0c20b4e8-044c-415f-8513-dcf3e5070a64", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d29fbd6-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771750207, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750207, "uuid": "44d84b75-0447-4622-8f39-85df807f2ef0", "comment": "Malware payload (Mirai)", "value": "a70c60d52deadb02d43f83aba13e58ae", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750207, "uuid": "4524bb54-79bc-43d8-9afe-6fb441ddea5b", "comment": "Malware payload (Mirai)", "value": "1c3f751ebcc3b3120ed9bfe25055f3c4783d5201528d6a977e921413ab8d564e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750207, "uuid": "a1faf784-4f5b-4b0f-8230-47a39664aa91", "value": "T18B034B2789769B1BC6D4637701D383A1D0FF1B8412441B4FBD0B4C5EFEB63406AA67", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750207, "uuid": "40cd6477-34ac-4f6d-b61a-8d4ebb169fab", "value": "384:RlypfUI44QXJTHncrL9yiCH7yWC8MGVNnHr+DCvkLl33Bv6J8G1zvr0VyoCFHf7i:DzjXJTHwLkPGEGCvMlHBvrgzAGFHhU3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771750207, "uuid": "d9d16b60-3227-4680-8446-7048c46eac85", "value": 38532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750207, "uuid": "cfc9f934-f626-4e9c-98d2-54e1743051b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d322091-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771750207, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750207, "uuid": "53eb2963-7260-4e29-9269-7c22a9af54fa", "comment": "Malware payload (Mirai)", "value": "007aad8817251111aefb7b221245298e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750207, "uuid": "90568fea-2f84-4f15-90ac-081b5973f737", "comment": "Malware payload (Mirai)", "value": "c8434d4800bf13bb1c4779ccfc1cf7d2df0ffa705d2d28c01d4bd69f8877f5ed", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750207, "uuid": "a68e5957-9622-47eb-b7ee-cf53b2e7d313", "value": "T1B6F31956ED819B11D5C156BAFE0E528E33131B7CE2EE32129D246F347B8A87F0E3A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750207, "uuid": "6ed85653-c0f2-459e-ab90-56785d85bffb", "value": "3072:fDw5Qcqgs41ZXEPmFJ5QajQJXW7vLaIgEnFNZTfJ4jgU9TjHawjG:bw5Qcq41ZXEPk9KXW7Da/EF/DJ4jg6jm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771750207, "uuid": "d5358146-19c7-4bd5-be5e-d7b5c6d5d281", "value": 166548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750207, "uuid": "2dc4bb3c-87b8-4930-8ef5-36673144d973", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d414b4d-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771750207, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750207, "uuid": "1b27ed70-c5b1-4d9d-a09d-d5bfdd83f337", "comment": "Malware payload (Mirai)", "value": "05d802743047f1bd7771a4dce73eeb70", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750207, "uuid": "713935b3-28a1-4c09-a35c-641afc129246", "comment": "Malware payload (Mirai)", "value": "504b10cb02d1ca93f1ed87aa310f23aa6947a1912c746db53a5287a41b745ab5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750207, "uuid": "d8a7dc99-0043-4022-a36d-501f8677cc96", "value": "T16614C70A9F510EFBD8BFDE3342E9070235CC650722A97B363674D924F64A94B4AD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750207, "uuid": "1b81194e-c237-48c0-9109-9e4a8df37262", "value": "1536:yFtMxWIoQqOWMDxRMqXRpvj5WmYgWGOJeYH+n9riu+VfojECb1qRZ1qzYz0II1z3:Zq4hpI7Kuf4bU9wFeXh/zV2Av86MX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771750207, "uuid": "75071274-7d0d-4585-8f43-5142306ffdc0", "value": 206360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750207, "uuid": "6c9771b3-4f02-4325-a09e-0706fdca38aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84816d0c-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771750220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "6b6c41c4-5d25-434d-9a30-8173567081cf", "comment": "Malware payload (Mirai)", "value": "6bbc7fd32207882d3e022adcb7acdda6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "d23a2436-80c2-4dbc-8681-a7fa0388b8af", "comment": "Malware payload (Mirai)", "value": "af00e8b3f24ba4d386ab459e94bbe906043e4cd4efc3f5e8c2f8a89016a89039", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "b477ab5b-8775-4093-a778-a209545c74bc", "value": "T1C9E31A45FC518B16CAC662BBFF4E428D772B5768D2FE32039D256F20379B85A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "6a71247a-dc82-4550-bc57-c79c3f396d70", "value": "3072:De4xyQkeipAxA6qmXjV5hfmr49ErQ3qMgWHJLTpyn79/A4:i4xyQOpAxHqO/Or4OrQ6MFHdTkn7dn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771750220, "uuid": "a9f968a9-e8f6-4f6b-9b91-0da9c506be41", "value": 150200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "95b1393a-85be-4456-a60c-1a121bca5b7d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8485d9f2-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771750220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "f7660b70-f552-43c1-9a07-c652fbc38820", "comment": "Malware payload (Mirai)", "value": "f443d8eaf59757f01912815db2df016e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "81a123b6-9001-41d9-a647-40ed38621abc", "comment": "Malware payload (Mirai)", "value": "b2c1ec5f468e7b2c6938fc46746d85c0adf717fa510fa4ba05a7c058de9cfa42", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "26ee772a-cbeb-4461-9bc0-6a194d97ded9", "value": "T16DE31945FC519B16C6C662BBFF4E428D772B17A8D3EE31039D256F20378B95A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "40937806-749d-4a66-a2da-24ef5586fd58", "value": "3072:czBs49tbMgxKZJ9LwjJhMXXlE/bQP9EfSf4PTRoSgKuGnH64vk2J:uBd9xMggZJ9LqbMSUVi64bRo9Kba4vks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771750220, "uuid": "0764407d-b3bb-4127-8e76-151a97b2c78d", "value": 154168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "92e7b198-c7b3-480d-b027-420653df5b59", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84870c51-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771750220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "dcb9dc26-366b-4ced-965e-fc8d4ca156fb", "comment": "Malware payload (Mirai)", "value": "fc2739947a90f3ab1ddcbe8af6787be8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "2ac3abdf-cd36-44c6-a187-d40b7d2da7b8", "comment": "Malware payload (Mirai)", "value": "21d8b4b092cef625032a9fdc22317954a1641f348fdf0c7da90416ca7a459b35", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "a79939b9-fe1b-42b8-a0d2-afbc1bd2b4f3", "value": "T165934D49F753E1F0DD4606B0116FB73D9674EE224024DE69DB94BEB7EC32A02A21B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "fa1ec747-4870-4da9-85a8-e01e7c2f83cb", "value": "1536:63+jK3iahFJQ2AKausTZlM5DCypOkn/OhdtIGDT9Yjr6gUf31IiyvCEr:PYLU2xtIlM5DnOksvTyiSi0t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771750220, "uuid": "d37ecea3-0c9a-412a-a44d-09c99ee90e8a", "value": 96680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "e49649e9-4179-44a9-a4e9-acba4688766a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "848a71ca-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771750220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "0292573d-26f2-4bd7-858c-126d92233f4f", "comment": "Malware payload (Mirai)", "value": "54fe4d981929f91942df43239520d706", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "36976358-2168-47ad-88a3-884b7d26a096", "comment": "Malware payload (Mirai)", "value": "5ec789decb23daf80798176bbae0ab69298127e8ff1977bb9c50c012e7e1de7d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "1ced38ce-a8ee-4e14-92aa-be49d5d43512", "value": "T1B4D36B77CC266F58E525E5B1B0318F791B53A95081872FBE19A7C6788083D8DF6063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "6508ce47-e391-4151-84e8-d554f1de6e7b", "value": "3072:krGWR6KnPBbFeipMIAWpyaMMBW/ttYHtfk:qGWR6yboipMMAMMVt+fk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771750220, "uuid": "dd39f25c-3a78-4d3a-a7f9-dee0a2f008ff", "value": 137980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "581f4fbe-8e80-4a54-9142-56cc75b8a53a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "848b5d9d-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771750220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "c1d71338-2cb3-484b-beeb-a953f67776cd", "comment": "Malware payload (Mirai)", "value": "807787a0b175aec8ef4babf41f61b95f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "8ed1baa3-fbb5-4556-bdff-e2332cd42f27", "comment": "Malware payload (Mirai)", "value": "5eb4a749b0390cd3afb22f5d4ac9f9776a70037fe2bb4ce2ac2fe158fabf6015", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "9058153c-92a5-4e18-9e69-92604395b7d6", "value": "T14214851E6E328F7DF368C73447B74A34975D23D626E1DA84D1ACD1052F6028E681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "b5b44d5c-c822-41ce-b530-43ff5568b1ef", "value": "3072:Y8Rms66dNRgxe3yiuPTk+FFwHWBKgs5MXcDpgSkbtdt6nykZ8:Y8Rms6HOyiuL7DPeexPt6yke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771750220, "uuid": "347c661e-a2cf-4efa-ac12-bf40e5dfe111", "value": 203384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "4b12e9ff-cb52-4694-9bcb-7e2814794b97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "849233f6-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771750220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "df12c4c0-24d7-45ce-b2e9-da37cdf4ba1c", "comment": "Malware payload (Mirai)", "value": "4b18657de1fe748c5a8aa13a0efb33aa", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "400e2063-c0ff-45b3-aa06-bb092bd9df1b", "comment": "Malware payload (Mirai)", "value": "210fef0b7498cf8883987ed45e45b7cc2b679ea556da2e632df82c77cbfb1012", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "23d95a98-5b19-4a9e-bc15-291c81b3f0fb", "value": "T173E3F649ED41AB00D5D536FAFE4F428973534B6CE3FA7102DA245B2123CAA6F0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "1bbfb245-ff15-4274-a0cb-faf4e0c94f29", "value": "3072:F7Yinkzc6QgeTRyyJijT4I+xp82WZZUGabudiGV8wGzl2Uh7z+om1tUiBI6:VYinkzc6mTRyyJS4hp8HyGab4iGV8wGc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771750220, "uuid": "aeefe12c-ea7b-41a3-a492-13d0e191c59b", "value": 145128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "ba84edd1-7d35-4f58-8581-a6cfca14f6bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84945984-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771750220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "2bd1291f-d945-46c3-b925-63e2db221b0d", "comment": "Malware payload (Mirai)", "value": "528b321237537ed72455f185ddba7813", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "016b383a-80d7-41b4-bf01-2f302324ca28", "comment": "Malware payload (Mirai)", "value": "336826db561250198b6bf289998ac94c504929984f5f2b80406307dd240d2a08", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "c58f96c3-06f6-45ea-9983-19633984400f", "value": "T12AF36C07B9C0D0FDC8DAC2B44BAFA126DA32F50E5134721F27C86E262E5DF216B2D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "e3db43db-4ebf-4923-98db-8f1e245dc3ba", "value": "3072:BF05NaD9dEou1RoM1t1kSKYpl+HpBbqPHCoNJzoSyE:IAUXJWJ6jsE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771750220, "uuid": "2e59405c-f016-4c0d-b966-886c0a76f8df", "value": 159792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "4634df18-48d2-4253-aec5-b403fac03255", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8494e354-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771750220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "f51f395b-91a3-417f-8401-f0cac1f399c1", "comment": "Malware payload (Mirai)", "value": "8f58b122b4319bfa8402a0d68cc3cf4c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "59c35758-8edc-4a7c-a6fa-10f8ff33d19c", "comment": "Malware payload (Mirai)", "value": "5efc9e0edb71af4a3c4590a998ee393ccf1692fdbfeeb9ecb6eff6300f26b3b9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "c9a38372-ed9c-43d9-ad9f-153bfd1fd33e", "value": "T1020429C7F900DEBAF40AE33748530509B130B7A204925A777257396FED3A1D91977E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "4b4d2ef0-5513-4488-8ee0-82c8880ae69c", "value": "3072:8yjtBkysL29WamfVshN8yyWU34SAXYR0t5cbWuobHviJlj7jLV3jbiTL3+b6aTyJ:7NxUyyf3bAZtr67jaLY3KZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771750220, "uuid": "1970177c-8928-4d3b-914c-8da017190bb1", "value": 177636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "87883c0d-13b9-4218-b602-36e21b32afd7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84999f63-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771750220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "f0f53604-fcfc-4314-9227-050441459c36", "comment": "Malware payload (Mirai)", "value": "ea34516e4ff72bac034e6ec67acec61a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "ce1d6903-c518-4d32-9195-d0fa547d0067", "comment": "Malware payload (Mirai)", "value": "e35d6edd468c3b13c909bd91c7bac21491acfea4e9a43387770b5b82f06280f1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "bc243116-6926-48b6-bfd9-3d21e7dd53b0", "value": "T1F0146BA9BA0F6C41F2C2D3F8DE4C87E13E1B35E3C7768971791212EDCAA39D959905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "be38321c-6ab9-4f36-902e-be6ffa447c0b", "value": "3072:Qxm5+DWlIzP1l0N26fxiqH0QwO9O7grSaioRplMlEN7oq:8m5+DeIzP1lq2qxVH0L7g+Epl97oq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771750220, "uuid": "e274cf63-d252-4346-a342-7e98366bcb8b", "value": 206832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "cd061f40-4408-4cce-a429-ce97f40826b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "849a23ff-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771750220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "3eb587b6-f2d2-4e11-82fe-e0b14211f468", "comment": "Malware payload (Mirai)", "value": "2f721b69b1384c1a7bb4c80956ad1f68", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "78468388-7e76-485f-891b-706fd7e7a500", "comment": "Malware payload (Mirai)", "value": "b6a9fd633492c3d43a91c1516e7e2f84e272c38b73355c886fba15ece5e65d9d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "d18d179d-2f6f-4dc1-8457-54fb4fa41397", "value": "T179E3BF97B7475050C8E50BF84BCB5BAC292B21119E6B88F77D2E363A19775CB180B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "8d032766-1441-4081-a40f-574519113ddd", "value": "3072:yWISWAJ4dk7vD/E8W02yqq2XIDge7d6gXCZvCA+Gq:yZSWA2GDMn0MWn7BCZvCiq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771750220, "uuid": "a62fe17d-e759-4842-82da-a54e97af3cc5", "value": 157140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "e7304ef1-b0b9-4569-a8f4-7f559925f0ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84a1f111-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771750220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "e27aa077-b993-4c7b-9222-63bef6d7fc17", "comment": "Malware payload (Mirai)", "value": "13be65ea39298d389a92b09d23f55add", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "8a53cdef-c228-4d0a-b487-f1d435c4e042", "comment": "Malware payload (Mirai)", "value": "ed2a969282cd755d934c153096c680a4270633e4a92a39703c086ecd9e910fb8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "1690cb54-3b58-4a65-9a57-26fbf708492f", "value": "T1D5E33A02B30D0947E2632EF43B3B27D193DF9A8125F4EA44355FAE4991B2D32158AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "ddd5235a-e301-4a37-b5b9-d17fb2c73a5b", "value": "1536:WXLpS5y3Rcf3AbQcqfbnxC5nMAZ9GxTK7NNvyEvWGfqPu7cuN+LXQBozMGCW8d1T:WbpS5/vAaxFudhdLvldozmWCJeeWs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771750220, "uuid": "48489a2f-0a85-4962-a059-705d0ed36dcf", "value": 154348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750220, "uuid": "2015c35d-e87a-4fa4-8b32-67c14a3c5a9d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a617cf0c-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771750276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750276, "uuid": "e2a6ace9-fc44-4570-a0e7-ae5be6fa09e2", "comment": "Malware payload (Mirai)", "value": "307f6a6c48da613893fe0da22fda0ec2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750276, "uuid": "247bb03d-0973-4aeb-a844-21e5ad8aa5b2", "comment": "Malware payload (Mirai)", "value": "3ce4984ff73e4d19742acbe23ebcb91075ab27770acaa5470056e36e6cb20bf3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750276, "uuid": "d2681c26-fff9-4532-a5ff-f4b2b0ff0989", "value": "T125C36B02B6C0C8FDC499C278469FA2B1D862F82D1235765B5BC4FE167D4EE212B3E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750276, "uuid": "4634ca94-a1ca-494c-b741-d488c09c6aba", "value": "3072:sd1HkmZ0W1TDg2rTsKMlsLGhp1pZaz8uAtaOlj0P8X:yHk5W13hOHju9P8X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771750276, "uuid": "f614de37-6fcc-4686-9fa4-776fe59e38b6", "value": 128776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750276, "uuid": "86845a87-6833-402a-b349-f8149776d30f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a61f2bf1-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771750276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750276, "uuid": "bab383ed-0c58-4076-b42f-b57b13c57ac8", "comment": "Malware payload (Mirai)", "value": "609f53dda21e66dbabd275fde421c71f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750276, "uuid": "8912d2c0-d1ac-4192-9a0a-a8b50a90f4a9", "comment": "Malware payload (Mirai)", "value": "2d1890cf8bbcd143ba3105d016842a8ca7710364de6e84592eb0a5c729fc32db", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750276, "uuid": "1c76fb54-f699-4f14-acae-6abad46e6d80", "value": "T132F32B56F992DF01D5C725BAFA6E418933135FF8D3FA3112CD20AF61238A59B0E7A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750276, "uuid": "40c0d242-22dc-4bc5-9b5a-3ea903e18bab", "value": "3072:QPCHMk6iccG+CXJbTQnjjOkhawTPR+YRiARc4U8wgrc6OSC9Hb1MqsP:QPEhDGTXJbMNhawrR+YRiARJU8zcvSCw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771750276, "uuid": "174d04e2-370c-45be-a8bc-4c5df0defea8", "value": 169440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750276, "uuid": "c041d62a-f6ef-4b89-8bf8-73ce0cc3b54a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a62cdc26-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771750276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750276, "uuid": "3647e67e-fb55-4545-9f61-da5e3a9c7036", "comment": "Malware payload (Mirai)", "value": "7feaf527095ce0527e2fdf62646951aa", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750276, "uuid": "77a64188-fe59-486a-a089-6d89fa488688", "comment": "Malware payload (Mirai)", "value": "064aeb691ac598dcf05ba13636573b5227330c8dd703e8c2a71acf8e8a3ad43c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750276, "uuid": "f6ae2cb5-6dd3-4ec3-935d-f1b0c45db791", "value": "T17BC36CC6D787C0F6E92601B42077E7370A72D9398036DA86CB747D36AC16A02E71B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750276, "uuid": "02179d41-20ee-4cb1-af52-75ba4b3af8cb", "value": "3072:vqTvTVckCuB+1qkJjGKcKP1cUyjnl4cUrAC:vqSkC8iIjx5XUrAC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771750276, "uuid": "34bef6ee-59c3-4c86-a833-7db60f065dce", "value": 121256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750276, "uuid": "cdf43c78-ece6-4f12-8fbb-533e298a4417", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47396b85-f386-11f0-9446-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1771752249, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752249, "uuid": "b172c2ef-637c-4950-9ef6-99d8dc65a5e9", "comment": "Malware payload (CoinMiner)", "value": "68b8f427224a0ef22e3d5e03363fbef8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752249, "uuid": "9bf20a41-d8bd-4441-b5ec-cb77408a7ada", "comment": "Malware payload (CoinMiner)", "value": "f1f57eb28380e340acececdea76a5efb3617d597225c13be9a954cb159907be0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752249, "uuid": "dd71f677-0dba-4be9-8b5a-e361f708c66d", "value": "T18D5533D2B6D3C6CFC4F3FA39941846BC79353D2A5906030B9A6D43B77A1AD680B87D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752249, "uuid": "b71406c9-c6bf-4cf7-ad4a-5d9a50df06fc", "value": "24576:dO7EQb5XgACLCKdjpfYnWN+ZPhTUu5UPsDGyMVYNVZpUPp:dOZnWkZP1dUuMVYHwPp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752249, "uuid": "1635773e-b773-4c31-bf00-5b6e25e5f391", "value": 1308604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752249, "uuid": "8d1ff51e-a226-4f0e-b455-d1081fc7f114", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e69a272-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752249, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752249, "uuid": "a21bb4ac-f18d-4c93-95d2-aad85282ad4d", "comment": "Malware payload (Mirai)", "value": "624f5b63743f0e96f2c352a65c38362c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752249, "uuid": "affe5d7b-f572-425c-be6c-326086fb8c1b", "comment": "Malware payload (Mirai)", "value": "5e187a1040994123c7ffb7ce9860904799668db3900dee512099384d1f20bb2a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752249, "uuid": "cc567120-ee5d-4446-aefd-4e8f31ffd7ed", "value": "T1CD6301F8327A5BC4D465297E4524DAAB6203127CF6A41E9D003BC10799BE08F2979F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752249, "uuid": "610c3bfa-5590-4d2b-b8c9-1264a4ce275b", "value": "1536:hl7KDxWDQOmd6veiG3PoBVu3tB8nOr4diSo/0+TYAaCeJ+aBN2:v7KVWFeiiP93o2SiSo/zYAaCVSN2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752249, "uuid": "03140561-2ae4-4315-aa44-d5b9011ecf83", "value": 71048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752249, "uuid": "f5097a6c-f34c-4c0a-aea0-dd80f1461778", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e731f6b-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "ec49a818-6570-4321-bbf8-a5bf7959b96d", "comment": "Malware payload (Mirai)", "value": "06a07c35c745b2451938854c7d981600", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "b8c9a82a-5f27-41fc-8c4c-7a5f51155f1a", "comment": "Malware payload (Mirai)", "value": "4a17e8294fa712ec340ce76ef5a53610cb67d12539cdb831c36b12c6f0638dd0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752250, "uuid": "42db7f94-fda0-4c98-a367-b87439175834", "value": "T1195302055A01D207ED96B2F36D3E5BA8933951852B3D8D01EE94B3F6C9718848AAD8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752250, "uuid": "e8e72015-a96d-4cbd-81d9-23c5bf5b79ed", "value": "1536:/SjaNcPNc1jOBG7Sp4wtLvYyyxQ8+/owJBg5G5PI6P2WAQJ:K7cJOISp4qAxi/owJBqIuRQJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752250, "uuid": "1068b1e1-7042-4ad9-8ec3-d18cc487ce49", "value": 65004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752250, "uuid": "f0e2bbf5-95d9-4752-b300-2f76ae7d1d97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e955653e-b3aa-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "261d2c27-de24-408f-8006-b8738b024293", "comment": "Malware payload (Mirai)", "value": "17942dd8f7a7f91ceb8d2cc954558314", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "f836c6ec-077d-4e66-ba49-6ebcba987ff7", "comment": "Malware payload (Mirai)", "value": "358ad6a038f7cd610edff0b4b5bb8f9d5373da0afc36b46df43f5238b34afd5a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752250, "uuid": "14d26180-b318-4e19-b508-eb7e3333e9dd", "value": "T17A433C95FC92456AC7D117BA771A968A336223A9C2CF7313CC0C0B5176C9A4F4E6BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752250, "uuid": "46155a4a-7f5c-4f24-a539-c154e2aeefc8", "value": "768:cZRao+g6Z6nGYbl8d6s8n3WkZDJmr9DKPkv4f76uwyMRE92FH0nzz:cZRao+ZajeAHWU1mr9DKPkiwyXO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752250, "uuid": "a52fee1c-4bb8-4f36-961c-9fefdadfff81", "value": 55344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752250, "uuid": "fd176f70-e917-4865-b0ce-7022ea76989f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1eb54223-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "7d2fff03-c91b-4d2c-9e36-22a084bef33f", "comment": "Malware payload (Mirai)", "value": "a590a06c18e1e25cfc595b3e6477e8ea", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "08fa3a57-4ffb-4d8e-b4fa-c0733013fd03", "comment": "Malware payload (Mirai)", "value": "1c544f9b7957bbae75e0bade822be8f3bf3e8bb84c266804996f1b3c516c7ba9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752250, "uuid": "39d5aa0c-7155-435a-b2b7-46a0eb842a0b", "value": "T1BC432B91FC9245AAC7C117BA771E978A33626369C2CF7313DC080B5076C9A4F4E67B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752250, "uuid": "2d9f9057-adb6-4e97-98b2-9e02033fc592", "value": "768:j2uoWsjpIE9StBkNxCU8d+b47DdZVOIr9QKw54u8OMb2FX0npzJk6:jABjpIE6auz8UDXcIr9QKw1EO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752250, "uuid": "7207bc79-73ab-41ec-be9e-ff1b9feecf9a", "value": 55308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752250, "uuid": "ddbde3ff-d5f3-4e19-895d-61b59ac6141c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43250a78-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "4bc583c1-7829-45f6-8944-cad7b09b7ef7", "comment": "Malware payload (Mirai)", "value": "f0455df8f701357c01eab9c0d6294f31", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "cad936c2-86a2-46c3-8242-34e4ef3cd308", "comment": "Malware payload (Mirai)", "value": "8417676d023b2de759904e051da33a0028b18f9626cf70f20af862c0845ee759", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752250, "uuid": "d611a1d3-ed5a-4a52-b7b1-bd86f3044812", "value": "T142935A53B9C480FCC849C17057AFB236D923F17E1239B19B67D8EA167D8DE111E6EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752250, "uuid": "76532917-25a6-4a70-a20c-02f165f86894", "value": "1536:lPfYtYZjnRc/6UTgUdQN87B87yaAQ01B1ks/Vyec5fwlLJH27ySHA:RxZjnudTgUdG87Ayaq1B1ks/VW5fGLoE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752250, "uuid": "0aaa5653-67e1-47c2-a06f-dee0579ee6ef", "value": 88928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752250, "uuid": "0ea61c2f-feb0-408c-bb30-ba6a9a25258e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb7201fb-b3aa-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "99463a5e-2243-460d-964f-d99f07989032", "comment": "Malware payload (Mirai)", "value": "55e4c3a08770e39d836138b198114b08", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "0b5a3853-49a4-472d-a6a6-059f8bafba74", "comment": "Malware payload (Mirai)", "value": "674637ec78a45cf6a6a0423a14ae811677d44d4ec456bf1f88c5cb098630629d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752250, "uuid": "f8ca7763-9a31-446e-99ec-858becf376ca", "value": "T1C3935C13B9C480FCC849C13087AFB536D963F17E1279B29B73D4EA127E9DE511E6A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752250, "uuid": "027ee6b6-a4e0-4d78-bc25-9665b09a07a4", "value": "1536:yc50J45j1WS60TzxMJQ18TidyRgQQ1h1Ms6fuftHHZlmpnahs:vf5j1W0TzxP8SyR+1h1Ms6feHHXmQC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752250, "uuid": "4419f41a-9417-4044-b62b-d4e4c2563aff", "value": 88928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752250, "uuid": "fb42d76a-9d39-4ed7-999b-240f54a7355d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ea9fd15-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "8db9f8f1-16c4-422d-883a-7c367d7444f7", "comment": "Malware payload (Mirai)", "value": "0fb793155f770e09857fd19c59a6e9c3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "1c2f9880-8013-460e-a832-c150329fd700", "comment": "Malware payload (Mirai)", "value": "9238a6324ce477e1547d3d64606ef914adb682325a82f5bd5fdbac9a80c12234", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752250, "uuid": "f4757be0-17cc-410b-b51e-3f93f59d90b2", "value": "T11DB37CC2F743C0F6D85304B1507BAF369E33D4BA5025DB42E7689A71DCA2A05D71AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752250, "uuid": "3f432574-c652-446a-9465-441ea0beca71", "value": "3072:EPian1DTbKm4EgPgdFRP2V2Zsv1hIB18eB:Eqan9ECukZsvoB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752250, "uuid": "9b0d09e2-3649-4a75-949d-e0aa7b5b122b", "value": 116168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752250, "uuid": "cb38e30e-6067-43c8-8214-00a47e3a8a9d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43903f96-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752258, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752258, "uuid": "9921b935-cfa1-4d22-99df-717762a91585", "comment": "Malware payload (Mirai)", "value": "3189d806bbb06f76f3290e22960323ae", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752258, "uuid": "11a38a03-4057-452b-bd57-98df494ad0c6", "comment": "Malware payload (Mirai)", "value": "42171c3dad761945b0c47c0e476d5bc41010e01551e6b6bb36f4e4cfa5c9095c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752258, "uuid": "97055567-042b-4ff8-9a7a-14b5238bfe3f", "value": "T123435DC4E643C9F5E80B1971213AF7375E31E1F82224EA93D764DA32BC53B41E586A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752258, "uuid": "2238887c-e0be-4fb5-9768-329b15546429", "value": "1536:xAD9SuePhT9LegvsqWSSxQshZTbJ9ghBDSDa/:KD9Su2hT9LegU9SSOshZT1OBQy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752258, "uuid": "333dd486-56d4-4d69-a761-837c0d0763c5", "value": 55472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752258, "uuid": "f533889a-0fab-4885-a7d9-03fdcfb4f90c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43941c46-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752258, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752258, "uuid": "49386baa-0519-4116-a38f-6ef200040322", "comment": "Malware payload (Mirai)", "value": "a58824bf4f4822d46b50e9ade7a36e9d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752258, "uuid": "7fdad31a-be2c-426d-8b4a-da89aff19f4d", "comment": "Malware payload (Mirai)", "value": "6104f11d2556940ddca2ea1daeb2782bd98619d637b369252937cb88c525c464", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752258, "uuid": "68c6bf26-ba84-432d-b491-1eedba9e2858", "value": "T1BC5302412ABCE83ACEA2D5390B6801A745DC59E46493901E53CD7DF88A06C74BFEC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752258, "uuid": "0e147253-5b53-4ae0-b39a-b1c8c205180f", "value": "1536:Mdcqm5iERozq3p7o8FwOA4zCKOFGUfKbeH6UhV/VH1AQw:MaHJgMo8FwOA4zUFGUO3UhbOQw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752258, "uuid": "bd2e9e6a-d9f2-4632-916e-3c500b2f126b", "value": 63928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752258, "uuid": "f1ce1cbf-b5bb-44a5-a654-f233d9b4ce89", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "439ac4ce-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752258, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752258, "uuid": "ded511a2-9a44-4104-9461-93571e5e59dd", "comment": "Malware payload (Mirai)", "value": "f996034fe2aaf717dd9a562133c1d675", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752258, "uuid": "67b5bef7-e7be-4b80-8039-5d9ffcec634d", "comment": "Malware payload (Mirai)", "value": "c15457fcd80ef1c25bb7746a82848260a8c76f9da37c58a207ffc283f6e858b7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752258, "uuid": "9ed3d5d0-23aa-4283-af76-f2a50bfb9fc3", "value": "T1756302CBBEF02B1BC0D8A1B5703814D69C39DDCBF243C6AD97E1E69607394725589B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752258, "uuid": "ef5b147c-ebca-400d-837b-c55a7b5ffb88", "value": "1536:kaxZLmYKVDNSl2y08yumeJyGYVmIMG5Ng:kaxZLmYKX+t08jmeJhYT5Ng", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752258, "uuid": "3daab439-5bc1-4712-8bf3-277d38e1befb", "value": 70460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752258, "uuid": "eaf584c4-a7ff-4d66-99a9-8f4b6f284690", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51d85ccd-03eb-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752258, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752258, "uuid": "353e0887-b89c-476a-890f-a5ebfa322ed8", "comment": "Malware payload (Mirai)", "value": "4587160621f002b318b71a60d86b876b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752258, "uuid": "7c7b1981-0edb-48ca-85a7-8d8d3beff758", "comment": "Malware payload (Mirai)", "value": "31e9e337bad2ad58ecc00d3056047e61f6df5d09be02df5e73118d1834ea6cbb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752258, "uuid": "407de5f9-a26f-4129-8919-548f538a9e52", "value": "T116D44A55B8419B95D1C06BBBFF1DA34873132B38E2EFB1069D186B246B9BC1B0F7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752258, "uuid": "7afbe063-fdf5-4da1-a516-bd28d9bef78f", "value": "12288:r+tkWziqHcEdgyAgXJHC3oSvEaK1RoGB5gCpWPI6VQ0nfajyAsm4bfKjC88G8h2b:rurdgylJHCkEGBOI8Oz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752258, "uuid": "ce6866f1-e2da-4ad7-89a7-61f32298fd15", "value": 605596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752258, "uuid": "eee85220-5ea8-4c93-a26d-fd4e2ba0d6c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "441549f4-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752259, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752259, "uuid": "44949f34-4f89-4dd6-b121-c95871741e74", "comment": "Malware payload (Mirai)", "value": "99b6b9de5d5c780eae1108150d8c272e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752259, "uuid": "0905ccf8-423e-4f41-b8d5-cdf945a810f0", "comment": "Malware payload (Mirai)", "value": "73dc56d859583236a4ffbe5413792acdbc742edfc306efe8ab7bc57356bceb42", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752259, "uuid": "48b2cdd0-8808-4231-8ae4-c6313ecbd54c", "value": "T1E2243B46EA408F13C0D727BAF69F4245332397A4D3E77306A924ABB43F8779E4E265", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752259, "uuid": "c1bc44e9-9367-4748-80c7-dd584e7b7202", "value": "6144:xTK8jctGpE/FDaDOA3zHZj1N721gdA3theM/Rmm12JLGhQH:JKNt/FDaDOA3zHdfq+6hX/cm1sLGhQH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752259, "uuid": "46c98a73-2bdb-4b73-9383-114c5265e445", "value": 219690, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752259, "uuid": "cda929e6-7200-423f-b874-051e05fc6755", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64196f7d-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752313, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752313, "uuid": "0e5ecf51-3b2c-419e-8040-e2ff8e53830d", "comment": "Malware payload (Mirai)", "value": "71f1d1a49346cda47ba641953ab4ebfd", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752313, "uuid": "07da3421-e972-48a6-b467-028f34f842d0", "comment": "Malware payload (Mirai)", "value": "a147cbde451e4a8a0c461c0e969d733d83abf5daae8ea15616da8bd7daa9cfc5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752313, "uuid": "0ada7324-c59d-47d6-be98-25e9e53e2457", "value": "T120510887127255B43CE29DBE72B51514F280E4692DC69DEDECD93AF48ACCE08229D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752313, "uuid": "8e0a611d-c2f0-4da6-b65b-0b333f603c1d", "value": "24:vh/3/gh/0l/0bikh/5P/5Hyh/x2/xynh/xTQ/xTYh/+/Ch/is/N3Ch/5pj/5Oh/P:vWiObsXaYXsktcwCBUNU3Ush7kKM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752313, "uuid": "5a2f10b0-5ee2-428f-94e8-e7a42baf9c83", "value": 2670, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752313, "uuid": "a53edea0-adff-4690-b48f-e3d3217123da", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64262063-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752313, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752313, "uuid": "36479c9f-de5d-4e45-96a1-9cd62cd56017", "comment": "Malware payload (Mirai)", "value": "2b2a2e5725ca5fa24543e49d17031a7c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752313, "uuid": "9eab74a4-0ef7-4bdf-b7fb-b0bf3f73b7e0", "comment": "Malware payload (Mirai)", "value": "8509612446d65b7ffd8c3f0439440eeb4b52f94b85d15fdeefc3d9caf332c084", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752313, "uuid": "74afc3a8-ea45-404c-af5c-09e721f8507a", "value": "T17701B98432F630F03AAED9DE4B725C9D308550653D877CB83CA7B0D60595D00AE86A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752313, "uuid": "434d2444-0a7a-4e99-b04c-c3b2b0106bdb", "value": "12:YkF1kcClZF70S9iHFniHF0iHFWfFSC+FM5gFlfFSs+FMDgFlA1LRPb:ZDkH/FbgHFiHFhHFWfFOFM5gFlfFIFMf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752313, "uuid": "4d76deac-26a2-4e85-8c98-def2f9307b52", "value": 762, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752313, "uuid": "227d944a-f6c3-4e6f-9356-5b9b17e2b16a", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "642fed65-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752313, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752313, "uuid": "83fcfbde-45a9-4257-ba1d-bc2de414f0ba", "comment": "Malware payload (Mirai)", "value": "ea966a95e6b53365ce8a369fff0869c5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752313, "uuid": "bd502f78-4399-4e1e-a53c-c71450d22155", "comment": "Malware payload (Mirai)", "value": "6312b6601eb53f407231e2b0d2e60f2c94ddbffc6e49744951d3bccc4f5d74c2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752313, "uuid": "c95a474f-5022-47e4-a2b6-77545f9a4dce", "value": "T19A01B5C2227138707CEE9CFE4A338C1C30C5A8773F865EB87965A5E60695C40D4429", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752313, "uuid": "b29da40a-19e1-4450-89de-639e717c9a78", "value": "12:YkF1kcClZF70ShHFDHFiHFWV0FSUFM5gFyV0FSeFMDgF+A1LRPb:ZDkH/FbhHFDHFiHFWWF/FM5gFyWFhFMW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752313, "uuid": "61c5b772-ec7b-4358-a41c-5241f2b9626a", "value": 753, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752313, "uuid": "45a2f67a-4acd-4328-8b8d-6a30893305c0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83d53dbc-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771752366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752366, "uuid": "25e415ce-cf20-441b-9210-314e45230c6d", "comment": "Malware payload", "value": "6104699ae018c2477ef5583cd895af3f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752366, "uuid": "57ea609f-ec9c-4599-a7d8-dfdd39963971", "comment": "Malware payload", "value": "68dca26577a02491a150d46db129894262f8467414e68badbca6deb45f4f6d54", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752366, "uuid": "d78006b4-1b05-4990-aa63-cf7b5cc5e145", "value": "T12FD2C04342F2276EF45A92B46C0B47BE5AB9781216D9CB6EC92601DE3D91FE38C343", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752366, "uuid": "c283e1c1-658a-4efa-9d1a-d1dc854ef6ac", "value": "4b2df774f65211b4962a056c4da67248", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752366, "uuid": "53bb3c29-68a7-4397-99d0-31f0791039db", "value": "768:bxwmq9h9EFp7NV8kNAriKIBoT+8iBtAzZyiN/MU81+Hrsa2:b42Fp5V8kirgBoT+ptAxNU91+L92", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752366, "uuid": "d1a952fa-f902-4dbf-9ab3-316d9886b7cd", "value": 30208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752366, "uuid": "3da550d9-040b-4534-8168-990ffddbbf62", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83dca531-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771752366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752366, "uuid": "6ec11e99-066d-495c-af1a-bb424cc7647e", "comment": "Malware payload", "value": "b6194f4581d2c7c77cb7ca2a422a3dcc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752366, "uuid": "2ca37170-efc1-4268-a7c4-cf8b1077f19f", "comment": "Malware payload", "value": "771bcaf6c059f07b349503f7c4e92f51aa4369fe5eab7cc72d32badb9ab1c051", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752366, "uuid": "9de1f5cc-59ba-4573-a606-6b764ff96946", "value": "T19DD2D04342B2276EF45A82B46C0B47BE5AB9781216D9CB6FC92601DE3D91FE38C343", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752366, "uuid": "f1ac79c4-f395-43dc-bef2-a981aa458d43", "value": "4b2df774f65211b4962a056c4da67248", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752366, "uuid": "642d412b-92ab-4657-8ff9-6a06967093c7", "value": "768:oxwmq9h9EFp7NV8kNAriKIBoT+8iBtAzZyiN/MU81EHrsa2:o42Fp5V8kirgBoT+ptAxNU91EL92", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752366, "uuid": "f3ebdced-16ab-4e10-9bf1-a2b4548474e9", "value": 30208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752366, "uuid": "57e51d75-264d-4165-b392-248e6a38194b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83e1f399-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771752366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752366, "uuid": "7ff0fbe2-3c2e-4e2c-974e-a29371e6c753", "comment": "Malware payload", "value": "2e55ddc8aba7b3ad5efa1767e76155b5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752366, "uuid": "dc0a9605-e637-4704-9a79-5fb16aa842e4", "comment": "Malware payload", "value": "163f1b65891e6886a4d9020d59ce722fd6f853bc18107fa49ebd1d4adf8c84d6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752366, "uuid": "72f79c0c-aa72-487b-9747-5f495bc7cdb4", "value": "T177D2C04342B2276EF85A82B8280747BE5AB97C1256D8CB6EC97601DE3D51FE78C343", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752366, "uuid": "feaecae4-71a1-4221-8cf2-2c14fc57b881", "value": "4b2df774f65211b4962a056c4da67248", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752366, "uuid": "af85a25c-758e-4263-b327-ebb80a46ef0e", "value": "768:Sxwmq9h9EFp7NV8kNAriKIBoT+8iBtAzZyiN/MU819saJ:S42Fp5V8kirgBoT+ptAxNU9199J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752366, "uuid": "a5ff0fd1-aacb-4863-9aab-20174bcebed5", "value": 30208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752366, "uuid": "e85b684e-4844-41c6-857d-c1babe6baebb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a81cb9b-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752377, "uuid": "846726a7-f390-4df3-be69-f95f01547483", "comment": "Malware payload (Mirai)", "value": "3bd948edbcb792c3bd46eed18dff34dc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752377, "uuid": "a094b5eb-1740-4df5-9673-595313339a8f", "comment": "Malware payload (Mirai)", "value": "251f154195e4b55fcc4e145efeb5e46a737bb6e5df4ebfd8a4df40e327bc4fad", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752377, "uuid": "6ebf907a-696f-4681-8e87-43edaad46b9c", "value": "T1C0B3F185B610EBA5C02632FCB4420980E3B25EBE5B5A15174063F9B46DBCCE43F1BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752377, "uuid": "f21ba4e0-ebb4-42c5-91e2-bf0928e78ae2", "value": "1536:Pdt7k7UF9CRkLL/Dgoyqj77N1AckLIS+dUNrx75EepFQZJn8bkhlTS6pp1prwgFS:HpF9jXgobN1AgdUJx75P0H8bwd1pwuS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752377, "uuid": "214f00b1-cef5-49f7-a6f2-1c37d600f09c", "value": 107680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752377, "uuid": "d076cfe2-280b-47e4-b860-7e4804d33ec7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a8e1972-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752377, "uuid": "2e90d21d-31be-404d-a6ba-d8a025a68cec", "comment": "Malware payload (Mirai)", "value": "2fd5bc1988f312e5ffd6219a37d896ef", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752377, "uuid": "f4ec4230-f423-4b90-934f-308c085c89e4", "comment": "Malware payload (Mirai)", "value": "668eb01e4c861dc8de3889d48c56c0d3e959d6c9cf4622387b4ac7a27d68852d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752377, "uuid": "516e1096-1a3a-48a0-9303-7e42691e3259", "value": "T17BB3E085B210AE45C02672FCB187099093B17E7B4B9A150B4473F9B46DBCCD47E0BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752377, "uuid": "4f9bd882-c7d3-422c-b881-cae968d6e2dd", "value": "3072:jx63zpjhO5z01nCU375P5wk5SOez7wuP:as5zqhr5Nzy7w0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752377, "uuid": "d3f425f6-4f37-4d9d-b04b-f7fe5115dff6", "value": 107680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752377, "uuid": "0b1eeb92-66c0-4f11-b525-22a128f6cbaa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8aa8cc2b-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752377, "uuid": "24acb585-70e0-40af-9312-54e733235450", "comment": "Malware payload (Mirai)", "value": "d5dca33160c0695003ecf51f8bce6d5b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752377, "uuid": "06fe7f0e-f369-4dbb-ad24-789f35a1626c", "comment": "Malware payload (Mirai)", "value": "3d68f02d44bb88e0f7eeeb2b76a4d6ebbb22ce9b0456a6ec9510e6c08125fac3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752377, "uuid": "686e4945-28e0-4ad4-ab1f-6b5c2d6eaced", "value": "T1137302722166DDA2D2B1803253477D09BD2388BA0374A7FABCBDA75FF487E116C0C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752377, "uuid": "2c959558-957f-4936-aa99-7f84cc075903", "value": "1536:a8zRnwvX0/jMQwZuOPFPijvDMwhQi1rYGhQZ9zWmw3vorZ:hzRnwP0bMQ2RijvDZZ1rYGhG13w/SZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752377, "uuid": "119da560-fa17-4639-b94e-e89e8cd0090e", "value": 74780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752377, "uuid": "b2964883-fe9b-4d87-a6c0-d27c6d3226ef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8aa93401-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752377, "uuid": "123ac260-4b07-48ef-ad1a-855a914103dc", "comment": "Malware payload (Mirai)", "value": "c7cfb3079f3196fd052f6fff092c3d38", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752377, "uuid": "6217825f-c23b-4541-9fc1-c10c65b42f41", "comment": "Malware payload (Mirai)", "value": "a412e9d4b89be000db074fd0d3fabda7db829d712a7fff1a5ce90a7558e96534", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752377, "uuid": "e39e8225-b09f-49b2-a8a3-033e51fe7b9d", "value": "T1A07302DDA53F5F84DA951F77B7721BD0397366214AF88F2FE917B16809060886C03A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752377, "uuid": "9024fb33-c19c-4ac6-8b0f-ade7fc8aaa13", "value": "1536:AuUPEcMMOUUQx6v2TDLxfK+srJvzR4OGJJuN+PlbH92P3AFptMLPNcBmorD:HGEuRxDw+sBe9NpkPwc+YSD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752377, "uuid": "d361ed37-fd77-4efd-88e1-c7bc272493e4", "value": 75548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752377, "uuid": "595061cc-b55e-4519-a4b7-8c5c3365ad36", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8aaa5e8c-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752377, "uuid": "dde04aef-e339-4f6a-bbef-406d06636919", "comment": "Malware payload (Mirai)", "value": "6420973fe5f79f16c9f4dcd7ce4f014d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752377, "uuid": "416ecfd7-6cd0-4af0-9aa7-f3bb326b4a69", "comment": "Malware payload (Mirai)", "value": "b3587c6bf920a99cb29c0e8d899018be1b4c98a94ec6340a3882a989f1f9c604", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752377, "uuid": "3c2f938b-d20a-4222-a9ec-7610778a8364", "value": "T14C01928061B4307274F6A8E68A335C5D318590573DCB2CFCBCE9B0DA99D5C04F0626", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752377, "uuid": "dd19091f-22f5-448f-a536-acd03faa9a47", "value": "12:YkF1kcClZF70S9fQHFnfQHF0fQHFWGLkFS8+FM5gFN9GLkFSG+FMDgFNdA1LRPb:ZDkH/FbFQHFfQHFgQHFWGLkFl+FM5gFF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752377, "uuid": "b033e5c4-aba3-4a72-b9c1-2c514619e282", "value": 753, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752377, "uuid": "af2c2ce1-288f-40c5-a00e-3eebff587ada", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8abb739d-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752378, "uuid": "292ad689-6ceb-4fe3-9bd9-5ee2b0792041", "comment": "Malware payload (Mirai)", "value": "ab0b6c95e5bd1541b3cd0bcbbc9185f2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752378, "uuid": "610909c6-7bff-4bfc-bd54-b9d062393342", "comment": "Malware payload (Mirai)", "value": "6f189ed8ff5deef6510a6d8f51a03bd68b264e353c711dafe92dd00ff17626d0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752378, "uuid": "db39c705-8083-421a-9b63-b572cd570e5a", "value": "T11B146B2BB3C39CD6D11067308C316366776FDB081518EAFFDA0B3794A997B225A246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752378, "uuid": "d7010c13-ee73-4de6-9722-945dcc18eb8a", "value": "6144:T9BOm51554Dk9mLH/Dex/omafjiFyT7IKTtH:n4DkCrexdsRT7Ia", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752378, "uuid": "f8dd41b0-a5ef-4e0a-80f3-02fd4807d154", "value": 197352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752378, "uuid": "339bc4cd-59c5-485b-ab87-2e5cbdc7e2ca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fc986d6-f783-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1771752380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752380, "uuid": "6514eaaf-3b0b-453f-90c5-61b40a27caef", "comment": "Malware payload", "value": "fc449bb4ba748318897a0fee67b55008", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752380, "uuid": "573e0dd9-29da-452a-b4b2-d27b54ef040a", "comment": "Malware payload", "value": "e3a4874547a3f1fcdad409cf47bf3f89e986ba5301a957bcaea7396368c33ac7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752380, "uuid": "f9933f96-1bd5-467f-a267-af1eccf4ed04", "value": "T18A415BBB54E37AA8385A699EB263422854C0F6CC5CE7578CB84C6E35B345548F2227", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752380, "uuid": "befa6627-f9e1-4557-a67e-e304c281338b", "value": "24:o9qMkpnIDd3Eo+h/s54NvIaNHnJl9vYp1MSQ7BVKfrnvN2DND7DTckM4StL5Ji5m:o9qMyIB3ETK8VE9cBC2RHmi5m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752380, "uuid": "a1812de1-447f-4e6a-9945-e361bf404634", "value": 1974, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752380, "uuid": "5df7c556-56be-4034-b25c-b2710397cad1", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cad3613-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771752381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "0758e0b0-3673-45aa-8301-2a7899168ead", "comment": "Malware payload", "value": "c509d7de26619037aad2b7e1ca345308", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "19f8b079-a03c-4260-a459-e2810bb22028", "comment": "Malware payload", "value": "3d59cdeb5d1ca179797367de5ccd8923041851875e997cb6900d434ceeb64abe", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "f257fe8c-a017-45fe-b00b-3d920c8457ae", "value": "T1BD5151AB07045B71DA09855EB7FA3574764EE083A6DFC644E9848C2D4ED9D4C3B86F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "c1296a93-9d38-48a5-a52a-48352dfb7d06", "value": "24:wp2JMMibiB0vuZ/EUEnE2EhEwUSbw/UJUfTshM3k:wp2JMMibiB0vuZ//cvyISbwvshM3k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752381, "uuid": "3bfe9ca4-2aa4-4c1d-bbf9-fe7caa70517e", "value": 2855, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "3c41941a-db3e-4fd4-b936-e122b1313dff", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cb04252-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "d5c400f4-75f2-4781-8293-0e3813b4de1b", "comment": "Malware payload (Mirai)", "value": "0b56dfbbef7e4a7397a14e7dc82b9464", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "00080c17-d2d0-4aa6-8f32-89a26dce1061", "comment": "Malware payload (Mirai)", "value": "ae51d17be1b85663706aa022946612a34eeb9571b1475187d757145c447c8e68", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "6ebcaa56-3063-4188-91d1-4f4880f8af12", "value": "T1F1B3B087B5917EBEE0546A3FC4134D1A93219F701A871B1AD1FCFA905E7A3D07292E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "f2a6225a-bf48-41c4-9972-0f04d623a437", "value": "1536:O/D0K1/IBij4BDp5A09CZjZfLhx4VjfEdna9AuYRHq0KUJ7LTJlOcGgbTYN8rSA:e91RuDp5A2wR4VbEdae99J7NGg4NUSA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752381, "uuid": "c1409c79-85ff-4e69-963c-9f17e9f4893b", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "7a15751e-ba6a-4b7c-bebe-1aba42df95e0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cba0b9a-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "abbb8e31-fa36-4e9b-a9c2-0941c61ba86d", "comment": "Malware payload (Mirai)", "value": "a07c08a11b077659375b0ac236f3a5b1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "4ad9b9ab-8ea8-4388-94b1-1311e5053e9b", "comment": "Malware payload (Mirai)", "value": "fab054bb2e450fe63b66ae8c010854eba7563d02fe4b3d9562944ecc8538eacb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "0d7ac1ae-9768-4d77-a1e0-56f1ce8fac8d", "value": "T148C3F185BB6369D1C1A342BDA4C00AC387916E318BE313080699F674387DDFB1F69D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "1cb95510-9653-4cf0-b001-0e7ea2b8803b", "value": "3072:OBb4K+nqsnSjZldbaUXGSgqTWo1OWqEwztlMMTns:0OCDjXG9qTWywxlxTns", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752381, "uuid": "190aa1ba-6c79-4115-8d0b-332ff7e2d82a", "value": 127816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "74cf442e-4345-4083-a6f9-45cae46f0cec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cbb4b97-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "24810a8b-8ec1-4abd-bab3-cf9e8a511097", "comment": "Malware payload (Mirai)", "value": "384a1baac72fcf36ad4d78c9700e07fa", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "12c83e4f-0ea1-4e00-a984-17f94ec4ec5e", "comment": "Malware payload (Mirai)", "value": "6a0c2a75df61c99057c7d671cb5d7119f36d34b1339d0f05fb90ea433ade22e3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "b9e36008-1ab7-4f18-b113-f3da20a97c3a", "value": "T1A2D3BF32E0145CA0CC121A74787A567C1700DFB806E95243EFFFE5AE28B7DA579EDA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "7a2741a9-b24d-4252-8f5c-1ee680627815", "value": "3072:sMEPoSS/jUyliXiwrLkcx73fjaaHy8K4JU0NGdbMBrSkmEZy:sMEPoj4Xiwrfx3aMy8K4pM1+rSPey", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752381, "uuid": "843f1545-6ee4-478d-a315-5ac5c2d19fa5", "value": 131656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "120f08f6-66a9-42b6-974c-94e258a8c80a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cbcc8ba-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "bce1f5d1-0455-46e4-b740-86396733c64b", "comment": "Malware payload (Mirai)", "value": "e74830113b24a26a9e7d55f72a73e4b1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "0f5176d0-44de-4ad5-87c5-807e8f4ac731", "comment": "Malware payload (Mirai)", "value": "820531ff09e25c12e7e042e87bf94cd6e6ca7c9fdc18c59bdc8d964f1d20839e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "7f839c4e-b508-4f2a-86e1-66714360321a", "value": "T18351F2DA02884FF59A46858F77F472F45B0FB082A6DBCA08AA84085D5ED9D5C36D5E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "951a1fa0-4702-4fec-b6a9-a2199f387abd", "value": "48:wTsLkL2JMiY4YbiBW0D0uZO3O3cvy4LUVDVbwHoMW8rU1ImkmhM3iRT:FG2JMtbbiB1IuZFxbwa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752381, "uuid": "bcac3ab3-2659-47a4-82bb-a41d6be41823", "value": 2881, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "74b49556-d29e-4422-b3bd-dff73e3ac632", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cbe01cb-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "4aa72988-9421-4094-b5d3-ac9f23dd52d8", "comment": "Malware payload (Mirai)", "value": "f50ed1fc3074b297a667b235ebbe15ab", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "f1abe829-ef63-4568-a76c-22b913757e8b", "comment": "Malware payload (Mirai)", "value": "e08dd2ae48eb72bfece0c3739daa38f9b1e5ef43ad1f5805314abf6d916900d7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "c7b81c2f-fd69-46c3-88a8-a0fe78903db9", "value": "T1BE5302E660D87DCDC1999730020F4A473E86B7B86089693AB2C5F6694BF2740DFD8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "86919c27-4711-4702-b5c9-5453dd09a3aa", "value": "1536:C1/S5aOdeB51F+yuXkoPgvFbFX6hTZ0f8ASRltyK6Lkg4azHI:CM5az1Fy0oPgdZX6hTo8RpyNLGazHI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752381, "uuid": "52d4b7c3-1a3a-4540-a4d2-0d56814c4c43", "value": 60808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "f1e5359d-2c90-4c67-b2e4-a1b3accb62b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cc45c4b-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "32c13522-e6cf-4f3d-8a8a-d25dd07f141c", "comment": "Malware payload (Mirai)", "value": "d502a2c6fa01cba1fdab4ee8dafd6477", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "53edcf45-15ff-4689-88b9-6b19dc97bb85", "comment": "Malware payload (Mirai)", "value": "6c3069d84cde3a690f4c0930ffd8378ebbae3fd07d9f8c09d14889e9ad96762f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "6a0428b2-5655-4832-bcf3-ef9fa8e22c84", "value": "T17004392F258191F0FA411B746BCFD3976C290BBF51A9909F6B416329B6E0B7BA02C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "b1e1092b-6c08-440c-8dd3-e848c45729ee", "value": "3072:ug8JifJCLRSk0L6L4CUbGyJltg+6TgO/NVGLxNxKurrz55UsUX/:ug/V+8rqyJkn10Dx3rz5edP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752381, "uuid": "00e4bd7c-97b7-4dc5-a8a7-9a92c663ff63", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "f12b73cd-a223-4465-9bc4-949a9c35a74f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cc6e5ba-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "a61367b3-b29e-442d-bb7f-187841fcd305", "comment": "Malware payload (Mirai)", "value": "22e731aa42033d447213a7dc93188707", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "46ea5051-5244-4fb4-8c22-a28c6244277d", "comment": "Malware payload (Mirai)", "value": "2862bed1d422e3da4b3c91e78e83d2b18b6c9c6f2df941a8a1930e807dc7ec88", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "431f9f11-fd3a-494e-b412-10bfb43302ba", "value": "T18A5301F871D0F7D4C655E735A82B12352E11929E3A86807093C66183BBEFBB8F74E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "fe1cfd7a-a591-4289-904a-372cbdee8c90", "value": "1536:wxsK35jx34Vpj73QxC0Qi00e+46LI2K56ztF1AqVquIzqVT4//Lkg4azHD:wKK/IVpHwzQit46LJKszVqecnLGazHD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752381, "uuid": "e05fba5a-7b31-442c-85c5-c93ed18b53e6", "value": 61440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "bf1f18b2-bf9c-4a43-9df9-663cbb6c01d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cc808c5-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "1e69e572-de58-4a28-a9d3-22168f92b2c4", "comment": "Malware payload (Mirai)", "value": "109893fb0ac3ccf233ff0632c6ad779f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "7f7bfb42-5e97-4250-b7b3-bb2c347492f3", "comment": "Malware payload (Mirai)", "value": "ea11768cc3692c563b2826811dba0c07f21883a6e933af55df73dad00fc11049", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "6125eee3-818d-4c24-bbcc-39ef6dc7fde0", "value": "T100B3AF87B2907ABEF0A45E3FC4135E26A6259F705583273D71FDF9906E3A3503292E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "9a4b4d2f-e91a-4a75-b772-8e6cace35a4e", "value": "1536:tdNSXAeuUGWnKYUqwaJ1Xq/3A5hcB57laZeCNjHWBOdiyWT15Ov6fHz/8rSR:t3SrlGWnKTU83AQB5A5Liy36fTUSR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752381, "uuid": "89811598-da3a-4f92-ac3b-b67154763d14", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "c861ae29-87ce-4049-8eda-224910c49a60", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cc81fe8-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "efe32d9c-e94b-44af-b873-648af58b5d72", "comment": "Malware payload (Mirai)", "value": "5a37f8453617b322c99ef0e0286aca60", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "eb2e79b1-2065-41c1-8d44-62d2d054e57c", "comment": "Malware payload (Mirai)", "value": "8b87ae8568b1df2f5d663f240f9ef8983a70220a55a7f801ab17680be07c495e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "0cb9f510-8102-4e18-a7f3-1bab45cc710a", "value": "T191D3C031E004ADC4DC2229B5387A56780720EFB407D95986FEFDE96EA477DD438AD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "dfc22144-9790-4f0b-8ed1-b17055fdb285", "value": "3072:qEiohTb/VCywkoE2r7moYLWaLl1erm+542k:qJwbwkoEi+hl1erM/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752381, "uuid": "7cc9d914-5bab-4c93-85ec-733439a5e2a9", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "0950b185-c09c-4488-8814-478ee3c1d303", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ccd9173-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "cbfbe4c0-6cde-4a04-b42c-3fe5f4859639", "comment": "Malware payload (Mirai)", "value": "e455b1c3e24c5cae920d513483d4bdf0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "dd396d2d-369d-480b-b236-e02fdd764059", "comment": "Malware payload (Mirai)", "value": "b3ca9ac0369acd596555a898d745d8d87cccb6f1aa4f246a0ec77933e094f829", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "3513379c-8c36-44ca-b787-dcac00040a82", "value": "T1B2D3CF32E0086DA0DD2117B434B6597C0340DEB40AD59243EFBEE5AE28B7DA57DEDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "5b62cd82-daef-4226-9063-be91f331de4f", "value": "3072:jNOFV2mOAc6NBmjOd1CVOHVv3WDxGGRhaUNhkv0Zc6:xOFgpOEoVv3MXL5NhGOc6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752381, "uuid": "a6b1b6c6-f3f7-4e15-9713-19f41a483f84", "value": 131656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "798f2d40-3317-44f3-9cef-f003ab67311b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cd27436-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8a089f8d-454c-40e3-a3a9-109b6c813e1f", "comment": "Malware payload (Mirai)", "value": "c445e995e4ccb76cab565f6985da305f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "de4bfba0-74cf-427e-98b1-79dafbf1e5d8", "comment": "Malware payload (Mirai)", "value": "4dfcab8636c6c466f65a9db27b48c5e68d85619cd9fcdbfc34ffff0c1e9e1de9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "4a3ef8b0-f794-4ac9-b7eb-35d2806ace85", "value": "T161148160FA0663B1CC730A38A7992E5A6E7704559FEB26312D1F533CDE628509B31F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "6815908c-0d04-48c9-b37f-4055757c014e", "value": "3072:bY2SDxkrWstW9w3ioqMwnKrp7xLsvKm/l4l7t/UKd:bVw9YiPMLLsymQ2A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752381, "uuid": "27192275-7efd-4a6d-9f7b-34d0e180c33d", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "68358e82-2652-468e-850d-1ce17c19109d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cd35629-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "1ac37417-f84e-4bfc-be81-2b1b50df52bc", "comment": "Malware payload (Mirai)", "value": "573f432d3bcf368cbd126e03529c9d01", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "5b94c643-d934-43f5-bf39-042fcfe6aaa5", "comment": "Malware payload (Mirai)", "value": "14cf31ce705b31c722cb5b394ff0847127745c0de7c1615d5bacf993666bd273", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "e8c76afb-26e8-4552-8b57-975d14983ce7", "value": "T1C0D3C021E4006DD1EC2129F578BA97B80350EE740BDE1582EFFDF95E647BD9438AD2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "69ca68a0-499e-4304-a59f-ded30b0bf2dd", "value": "3072:PnicTtkAg7FSGp+VJE6AqUjq+c7zAbpb9/xW:PiySSGp+PMmT7zMplw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752381, "uuid": "49a28955-593a-44b4-8fdc-bf278d468f5a", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "330d2ec8-a959-44c2-940f-65165b3e3945", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cd45416-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "7607032a-9019-47c3-837b-81ecfc40c4ad", "comment": "Malware payload (Mirai)", "value": "737a83806a5bc3e9bf24d6c44daff3f6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "401ac85b-551e-473a-84c2-aff12657aca6", "comment": "Malware payload (Mirai)", "value": "28f258264926456740937f72be9730aa91016b75a0fad8c59f442af615d4cbd2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "f147046e-e42a-433a-962e-79929aa2019c", "value": "T1A8631255E7E85F92FDA0787292000BCF8289861E90DFE363C6628D5B71FD3A46BA14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "b0014dc7-332c-47af-9fec-bedf5ca1e68f", "value": "1536:9n7ZEOA5ZDC6WmaQECYPTEJFEpAnUpR7/cDcwrPd:97ZEOAkJfCSTseyUz//wrPd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752381, "uuid": "ba8ee76e-bd9a-42f9-8da4-b0d1daef3b72", "value": 71668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "2b5a3657-db02-4795-9752-404a487e1e47", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cd548ca-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "4f816b68-3b77-4e37-9dbb-e2d3b96c1ddc", "comment": "Malware payload (Mirai)", "value": "2c35e819a7fed5957698c9ffaeb518be", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "5d4d9868-ef4e-4f10-99f5-8520e651d241", "comment": "Malware payload (Mirai)", "value": "3d0c82e414977c4992746512c7303ea8fe501529b86f5575d01bba8b1a1a9bfd", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "596aeb4a-b675-46c1-a5d4-c1bb763b4314", "value": "T1D4146C2BB3C39CE6C51063308C316362776FD7081958EAFFDA1B3794A9977225A246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "6e6ca93d-4871-4070-84cb-34c4ec343107", "value": "6144:1R9Om5159ZA0mzoWcz4Mm4ztkES7IKTtd:BZAyFzQSdS7IU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752381, "uuid": "e74c7398-56ca-487d-ac54-bfdc5b31f62a", "value": 197352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "b195c392-7c5f-4a24-b125-691439b10c13", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cd9d5fb-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "4bc9a400-cf80-4653-8bed-313c70cfd192", "comment": "Malware payload (Mirai)", "value": "da5908bc70eff85027cfe503c6fd0c23", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "d979b00e-8250-47fe-bebe-33f122c0e358", "comment": "Malware payload (Mirai)", "value": "31eba9c0c952854faaa5da836f9928c06af31266daf7709f80212a50422b98de", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "51f6c5a8-315e-4ffd-9075-bc5fab7aff44", "value": "T1E7147120FA0663B1CC731A34A79A2E5A6E7704559FEB26312D1F533CDE628509B31F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "50cf2910-97b3-4d78-a125-07d60ecbddb4", "value": "3072:IcHZcggt1NJmeDQBwnKUDMaVsb3pjr1lCRNUKG:IcY5JpMByVs9jSgf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752381, "uuid": "6e62e714-dd63-45ad-a6ad-6c731fe7b7c0", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "2032ca7d-c0d5-47ba-8497-e0fb5b18de1f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cde7284-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "c8cfe933-3460-4db5-ae49-d78ee2697b16", "comment": "Malware payload (Mirai)", "value": "3c8ac3bc654c6714e7f9f6f51910079e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8caef3e2-d691-4bc1-9b64-018ef5c5c483", "comment": "Malware payload (Mirai)", "value": "80b3a7e4763bcd547828ce79b27f8f580e2340f035bde5e93cf9981ccba7c7d6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "5a9e181b-a900-4eb2-af81-d1cc4602feef", "value": "T1F704392F358191F0F6411B746BCBD3976C390BBF51A9909F6B416329B6E0B7BA02C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "74614ddf-32a1-402c-a79c-ef4340c56c8f", "value": "3072:7mPX5bl7RDfPIX5eG/L1AL0SFU66gOSNL9CnNgRdgJi55wtUXS:7eJpJUVD1A8n0YNgEJi5a+i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752381, "uuid": "ae2e4f26-5b64-4f67-866b-6471c655d79e", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "35c4380b-9c3a-4b46-98c3-993b5ca29195", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ce214ca-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "f70f6d55-e2c7-4dc4-a43e-272bb875f59b", "comment": "Malware payload (Mirai)", "value": "e70cc3db3f8c698ee17bfab3bc8b2378", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "c72991d4-7939-4b5b-a40c-446cabdea9ac", "comment": "Malware payload (Mirai)", "value": "ef6704d360061f6a38574e663608c744760ebe41851648d22e142ec4fa464383", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "2805745a-6aec-46e3-af4d-9e045de8768f", "value": "T1B6C3E096FB22A691D0B302BE64C10AC387615E368FD217440298F77438BD9FA0F65E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "33920926-c8e6-4b49-85ff-dd5607f89c27", "value": "3072:8BdoeH4EGPfIKnBX9OZOqSFxSgzUvX0atRB3JMMTnH:4oi2PbRI4FxxzULBZxTnH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752381, "uuid": "a93a6fab-bd6a-494e-8dc3-19cbcf72e603", "value": 127816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "721d53f9-05d4-4e23-b887-d089f3835b5f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ce37357-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "c468ad64-82be-481b-b56b-0ce2bc0881c7", "comment": "Malware payload (Mirai)", "value": "0fa3641ab93a7c4db137991a1c959ce7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "2be606f8-c217-44a7-ab0d-dd31d88070be", "comment": "Malware payload (Mirai)", "value": "1c82d472f9c9b5b67b1418fb9fee2f71e4b8a62ee7a5151b23bec18f5b5e1585", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "38b4e36f-646b-4fff-8e85-6162c4964453", "value": "T1B4631297FFDC1F9DE8D91BF807AA75CA27629035807242B40CE6588A815FDB2109BC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "bdc81d6a-29bb-4eb9-81b6-e8a23d43b46f", "value": "1536:JK7MbwKNGjjH+Xq34n/q8Zu41zmX3sDgglrPT:A7Mbp2L+Xqdfoz2sfrPT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752381, "uuid": "adab7a10-9c1a-4577-ba37-046139e898fc", "value": 70852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752381, "uuid": "b6066899-e35a-4c8e-a384-3de40f985597", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a82eb3f1-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload (OffLoader)", "timestamp": 1771752427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752427, "uuid": "72211675-34c0-44e8-91ea-2ac54fb38362", "comment": "Malware payload (OffLoader)", "value": "4040259cdec07f8d3266d536b1231282", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752427, "uuid": "9c1166e4-9b97-44e5-a419-cabfd5af8d92", "comment": "Malware payload (OffLoader)", "value": "ef96b8d7d5ab8c2cc37172aaff79e088efab82a2b31b6bbd7f40cd63eebc45a1", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752427, "uuid": "0708d3c2-0a1c-461d-8502-2c47cb0c1a1b", "value": "T15C762233B24A633EF46E0B3B09B6A2505D3B7A51A41F8C469AE40C4CDF7E4601E7F6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752427, "uuid": "74574714-30b4-49dd-8166-d0c4dcd61b50", "value": "ac4ded70f85ef621e5f8917b250855be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752427, "uuid": "e59a70e6-9c19-47c9-94f0-c62f6796cdcc", "value": "98304:GN661ACr25WKwHwRwGLAAm7Z+aCobOP8IMUhjEkVOqGVXCR8GNWzkcUR:W1AZU4wnAq42bOP8RYEk3xRyUR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752427, "uuid": "afcd2214-163b-49a6-97eb-4f111c7eb423", "value": 7624484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752427, "uuid": "9e8ce565-e281-421a-96d0-5ddd36f52047", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81e00533-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752792, "uuid": "b64135f3-595f-4e10-a4e4-70b1e5b2d7f2", "comment": "Malware payload (Mirai)", "value": "460055e2f334493b4eb3ae21a6f67d03", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752792, "uuid": "c0e6759a-ab96-41e5-a132-6d0dd190e528", "comment": "Malware payload (Mirai)", "value": "c7e698a05ce1f31a85c30c227ff9e25e83d5fd29d4a1f3ff8da9eefcdf4a1621", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752792, "uuid": "432220b0-cf81-48e1-a5de-dbc97949906e", "value": "T10923E707F54380FDC05AC274066BB93EA82675FE1238F2B67BE4E7226CD5E225D19C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752792, "uuid": "3abec731-6e59-4914-84d2-cbfb5b059eb6", "value": "768:PZCjNaOeWibQfTlXmBfOIJ/c1cN9KFf8D+jDeuqxjik6BLv50Ynx2fEj1sxKhN:IjYOeWibihXmBfOIJ/c1cXK++/e5lO5C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752792, "uuid": "c1c801d3-cca0-4bc6-a9d9-2dde1c9cdb8f", "value": 46336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752792, "uuid": "b4c97515-7de4-4495-9574-180f3eb5fab1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81ec9394-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752792, "uuid": "13359a68-3578-41b6-9d35-17f0e42b24a4", "comment": "Malware payload (Mirai)", "value": "eb49f90c28ff1a25d0eb9e7fbe01fdee", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752792, "uuid": "a9ca690e-ef82-4fe9-b27b-b4fd1c1172b4", "comment": "Malware payload (Mirai)", "value": "1f2ae3461a20228370543cb57585a0aec46216658815df0a2a1357108267c396", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752792, "uuid": "c1c01cd2-ee62-4554-b18a-d5add30b1893", "value": "T15FC33B46E6418B13C4D61775BAEF42453323E794A3DB73069928AFB43F8279F4E239", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752792, "uuid": "fa193837-5c03-4a66-a768-92caec54d390", "value": "3072:B4lg/8Zz7CzlQ/bDaY25ezKEUCRcGM/9wkE:B4u/8RilQ/bDvCezUCRxM/9bE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752792, "uuid": "2a465ad1-cbdf-4c7b-8ebf-5b28d95ec613", "value": 121034, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752792, "uuid": "fb9983b5-6211-4d99-8e6c-53a07b96960a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02232835-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752793, "uuid": "bc227ac5-f036-433a-bb78-2b3a07c1f728", "comment": "Malware payload (Mirai)", "value": "08032b4259310ce451b4968ac0b814a4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752793, "uuid": "26c6373c-e597-411b-b9ad-31fea804886c", "comment": "Malware payload (Mirai)", "value": "c6fa6befa00083e6f63fb21de0aef17047079534f31c7956e429071c11dccb61", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752793, "uuid": "f5d67dda-f70f-4b59-b587-ae257afc98c5", "value": "T103837DC6E743C0F4E8528973213BE7328A73E53D102DEE83D769A932ED12541D66A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752793, "uuid": "97142955-0d25-4f4a-8d7f-eb12908dcbb1", "value": "1536:bAxTtfhenc5SWhp9ClAIVVk/13HWCsBjJe7s4TtABV:bALIuSGp9ClAI4/13HlsBdarE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752793, "uuid": "7d5ac3cb-2009-45bb-9a56-743559f061ee", "value": 80880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752793, "uuid": "806e66ad-35be-4f51-8c07-02565b41b93c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff454676-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752793, "uuid": "1788be4f-1374-456b-9822-c4a3379178b2", "comment": "Malware payload (Mirai)", "value": "255e1a0a46ba7980778e329e30c80fac", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752793, "uuid": "250818c7-3f71-4c43-9848-6d88f3a895b0", "comment": "Malware payload (Mirai)", "value": "c21fee2611a33c3b8628fc24f9718d46e0f8df975a2837be6b641d754365f1ea", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752793, "uuid": "da21f33f-237e-4410-a294-749d3bd8ea7f", "value": "T124937D85FB83E0F0DD0609B011ABF7798A31DD362024DD6BEB98FD76AD326129116B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752793, "uuid": "6d273a27-f9ac-46ba-87bc-810d7d49507e", "value": "1536:JUj89KwKFRAXmDRDDCczE7JoQ4z8GGIYqoBcQaU331QUHLaEiKixr:w4KFRA2dDDCczE7JoQ4I3xuiG1l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752793, "uuid": "d87ac1b3-4988-41cd-8033-d39d2655a8df", "value": 95444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752793, "uuid": "05158655-cb24-4a70-b284-473a474da712", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9b46431-b3aa-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752793, "uuid": "9592338b-15a2-4fa8-b320-6f50e8bff4aa", "comment": "Malware payload (Mirai)", "value": "9557c9a3d2cbafb9737e5426bdfe3ce5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752793, "uuid": "1e31c4d5-0f72-4a94-9de6-b1ab3e75c544", "comment": "Malware payload (Mirai)", "value": "795d6442fff29b5fd60ef1c2e271b802a9718e5d9cdf72b20ef2f566625bd0c1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752793, "uuid": "811f3f1a-52f8-410b-b152-2c9db872dca6", "value": "T127836CC6F743D4F4E8120A71217BE7318A73E53D502AEE83D769A832BD12641E75A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752793, "uuid": "8612055f-8638-436a-8d3b-79407792f03c", "value": "1536:4NGfle9cPS4ZS96h+XVE143RrFUCeWtsrswWdZa:4cEWSkS96h+6143RhUCeAszD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752793, "uuid": "69e87ec3-0b2a-4426-ad55-b5507979538d", "value": 83600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752793, "uuid": "2a21b934-8074-4093-aa55-78d8d5c91cc9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb657da6-b3aa-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752793, "uuid": "cfd3a91d-e3c3-479b-afbe-ce377ddf7afd", "comment": "Malware payload (Mirai)", "value": "3cd8bc2874c578a24fa5c760ae2201e9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752793, "uuid": "fce30a57-eb0d-485d-b355-d4d92416545d", "comment": "Malware payload (Mirai)", "value": "33145a434135fcf53e3b9021962369255e76e07b642175504226077a2b20cae3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752793, "uuid": "25569c8f-4310-46f4-8508-c504b421c3ee", "value": "T166936D42B70C0A43E1574DF02A3F57E1C3AA66A120F8FA89790EDF4996B2D325547E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752793, "uuid": "4d289b1e-86ec-47fb-87f7-574afbccc6af", "value": "1536:qf9jbHKubuZqESdJmL00CZ0MaIy3qTfl3GwT1fm4ymM/0l1WrFVfTAeG2+c:6/DHTfhGaymMyWr3+c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752793, "uuid": "49f6aa28-c0f9-4d16-bbef-8bef2ce51f5c", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752793, "uuid": "c3238234-63df-4a64-a922-623b8fd601cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9c1d37a-b3aa-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752793, "uuid": "4d573295-31e6-42cf-9994-106198d3a79a", "comment": "Malware payload (Mirai)", "value": "125956a3b6f8d2671fd5c4410d5c9917", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752793, "uuid": "9d8cab79-2d4d-4dff-bbc2-1b7b685c01c4", "comment": "Malware payload (Mirai)", "value": "3ad2c691fe3f6234ce74c0c353daaca6ab7d3e0f398be5707f6b1bb11cefbf7e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752793, "uuid": "0e0343d9-c570-4809-b121-45fe1244282c", "value": "T12FC3C85E6F218F7DF768873047B38B21A75933D626E1D685E2ACD6005F6034E241FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752793, "uuid": "de10675a-88bd-42aa-b086-11c598040596", "value": "1536:Y88H1Lkwwe4eypjkqJ2IzjvCLEu7Qpa5VB4nbHGvcEtueK7N5mt9puW6:Yr1L/wvZkyD+B4nbHPEthtiW6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752793, "uuid": "a8aebe58-9d70-4aef-b613-60b37f27c0e2", "value": 118400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752793, "uuid": "42da57e1-ac6a-4132-b216-95ad9884374a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "871ff4ff-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "61b308c6-6e21-4c84-9211-0f471fb6539d", "comment": "Malware payload (Mirai)", "value": "c55c3f1196442b0a865eb6bcf3c1e7a9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "ac659156-a691-4703-ac54-601b284657fb", "comment": "Malware payload (Mirai)", "value": "594300d42eb735eadc2e407ac84eaf7554c662450ebe9846d45e11888fd18137", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "9bbaaf7a-33a5-402f-ad37-dd3060228919", "value": "T1A103D791F8429727C2E1237AA6BE5A8D373073E892CB7617D9214B103ACA51F0D63F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "e83d4d3a-2ca9-4090-aef6-0f0e7e56091e", "value": "768:9jpBofvAG5/w802yuIm8nWpjd44vHkW9pSN8pOSBU2ko70NLLC/N2wUkkkkkkkkX:90fIG5/w4Im6oDV4qp/VOLLCBUkkkkkk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752801, "uuid": "72296c9c-2211-45ff-b23d-8b94a2bda7ff", "value": 38116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "8c53a45c-9f0b-4b19-88dc-7c4951aa0e17", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87313518-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "f54c38af-224d-4f22-be1f-c5ecbfc64515", "comment": "Malware payload (Mirai)", "value": "6a0110403c822b86318da2bb8e7ad6ed", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "12d0603b-594d-40df-b127-16cece328f39", "comment": "Malware payload (Mirai)", "value": "d5c9fca326e5157fd60b1e8bca867b3803a121795a4ab737765e9198a593b096", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "99ed123f-5512-4e88-832f-a96c445dedbf", "value": "T16443521E6E228FBCF75D873447B78E269A5833CA37D1D581E25CD6006E6064F241BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "d914c906-b2eb-41be-8007-e1496aa81848", "value": "768:SEBm51E3/4cvjYJNu9ZgNIbWPDE5kJ2Yu+Z2SRX1qXQZXQ5GtMdO5R4blZpEGyw1:0A/Dzg5k/+0SFRAvpEGLTx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752801, "uuid": "21290aa6-0f29-4e89-ac32-0ecc8b468597", "value": 60108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "73dacf99-2681-4c42-809a-85883aa1be69", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8734a2b7-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771752801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "e56b9163-31af-4b2d-b5d1-ff2afd97a6dc", "comment": "Malware payload", "value": "aba4317de47a7a021ca8ae2813b54e4a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "511c2d4f-d2d9-48cf-8fd3-dac1a788b7c7", "comment": "Malware payload", "value": "569af99f50e0aab7512e598f9d9cd95356e0ff19b478da2511fcbff02628d54a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "6dd054c5-e656-4821-8c05-51d5f719d43f", "value": "T1ED23279AF8428D7DF84BE73E54174E09B92063C152831B2B23ABFEA3BC731595D12D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "d90510af-a5fc-4002-86ff-3d46fd62b4c2", "value": "768:EpDeMydn0XveJzwDmDYY7xSEuq0c4xs4/C6K6LD8NQE8l9Gn:mxXvedKgxSNq0bs4/C6K638N98yn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752801, "uuid": "55fb69f1-f295-4bed-872c-ce63498bedbc", "value": 46660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "d481e8e9-8db6-4204-8310-556560e55f41", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "874b434f-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "5c197a01-8f89-44f8-a5d1-ca9b94890e04", "comment": "Malware payload (Mirai)", "value": "171e886283a48ac3c02cf1c49fa7ee84", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "87814833-bd08-4ca8-b87e-6871ae668d97", "comment": "Malware payload (Mirai)", "value": "faca2984de1ec208338d07a58785a2424adc8a7c019338a03871f0583b48f5b0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "4c28b514-3962-4a41-bf9d-cce809cd5992", "value": "T17A53A419BB650FF7DC6BCC3705A91B0528DC5A4A22F87B367934D828F50B20B59E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "e7318420-bdc5-4ef8-b361-a6f9cf20ab32", "value": "768:Lsn11aQZiXbzNPUwmgIHZUl5KceP6eO/Xp7xZhJhXitbs25AvgwNj:on11a5vNhlv+6d/XzZhJX25eN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752801, "uuid": "f11ef419-626c-4ef7-8fa3-8566332d6d57", "value": 61420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "449b0221-3ffe-4290-bcc0-ddd7d50a4750", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9cc9165-b3aa-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "9b9af602-d226-4e32-a847-4193bfc173ed", "comment": "Malware payload (Mirai)", "value": "abfc6c07e4fb54aaceee2fc86a561681", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "092809f5-fc6e-4852-868c-937df0f9e200", "comment": "Malware payload (Mirai)", "value": "2c826d8df656e5cc50813fe788009e1f51a98c9ceab4d4a627284ce0a685a06a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "a7a598f6-58c3-44f6-a8ae-39701845fffb", "value": "T1A9433B95FC92456AC7D117BA771A968A336223A9C2CF7313CC0C0A5176C9B4F4E6BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "1d10d2e2-d6c2-40e8-a148-17cdd1faecc2", "value": "768:cxao+g6Z6nGYbl8d6s8n3WkZDJmrdDKPkv4f76uwyMRE92FH0nzz:cxao+ZajeAHWU1mrdDKPkiwyXO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752801, "uuid": "25d1aaa0-f068-493b-930e-8e39ce6128b4", "value": 55344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "083a5289-c225-4117-88a1-ff7eca3cab38", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff37819f-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "7bdf98c8-2c10-48ba-bbe3-d43a37d7776f", "comment": "Malware payload (Mirai)", "value": "df0266ed4fa163135a02c657518ab828", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "195e7d57-d802-4c34-9cce-b843d6b2eeca", "comment": "Malware payload (Mirai)", "value": "0cddb8c8a70b498bff911e54c54f2101f666486de3eeb8e2359eb425fe355d40", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "5ca01cfc-cb5d-4724-87e9-453365db6bef", "value": "T1FC432B91FC9245AAC7C117BA771E978A33A26369C2CF7313DC080A5076C9B4F4E67B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "ada129bc-6921-40ea-a972-f71ca0ed1b7b", "value": "768:yuoWsjpIE9StBkNxCU8d+b47DdZVOIrdQKw54u8OMb2FX0npzJkr:MBjpIE6auz8UDXcIrdQKw1EO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752801, "uuid": "96ac91a5-0136-487c-82e3-d2f8c1d9ce39", "value": 55308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "799fbe6e-b5ae-4667-af31-66c78cd8c5a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cb4bcda-b3cb-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "d4cb5c18-22b9-4a92-af79-5da41d1fa25a", "comment": "Malware payload (Mirai)", "value": "7ab7b728a0918cf291a0b8f29a0b5143", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "1b1effd5-a105-476f-b081-474f776ba892", "comment": "Malware payload (Mirai)", "value": "be0d482d9f8512bac4624a3639f5abe88963c7851370041a85f9aa9522969818", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "65f15e94-32c6-4173-a9e9-5b37831c5d69", "value": "T136839C23C9361DA8D84804B0B0B48F755BA3E515C4572EFB599AC63AD483EDCF68A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "ada2c70f-8156-4b00-b6f1-b010bff5fcdd", "value": "1536:KxD+xE86+GxalPshbEKRvyQV+XRCaW9x7IHyk:Kl+xsx8E1rRz+XRs9M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752801, "uuid": "af5d6676-78dc-465d-a18c-881815fca17f", "value": 83812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "de73398e-420f-42cd-8a9a-0d001ded21e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "021c31a9-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "518d477c-3d38-4118-b91b-30761aca4b1b", "comment": "Malware payload (Mirai)", "value": "b753c963837dafadf2b433be0746da41", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "f2dc658a-f29d-49f6-b327-0793809905fc", "comment": "Malware payload (Mirai)", "value": "2696eeb4ffbce47e4685743698a8d0be93714b2b74bb45187a39b859943189af", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "1a7171fc-20e7-497c-8b2a-9f05ed18d13e", "value": "T14A933992FD818622C6C116B7FB2E428E376713A8E2EE72039D155F2137C795B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "1d04f0dc-a45b-40bb-a688-c5385e022730", "value": "1536:Q5cCxUV4w2eQpemBLn1l0+Mi3DbP194EBqNmvYEaLAr1ocMtbv6aIA:Q5cCeVhQpeAwi3DRGEQNmvdpeB6A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752801, "uuid": "bfd0c961-a18c-40fd-b7e0-6608d4af40aa", "value": 93228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "339e3cc3-a887-4751-b220-a1de4f720376", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9d92d8d-b3aa-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "0312813a-557a-4782-980a-567a4be16b4c", "comment": "Malware payload (Mirai)", "value": "a0a7ee43360734e05915af1787d10c52", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "d6b8bb95-8011-4b60-8f74-3352a87e4abf", "comment": "Malware payload (Mirai)", "value": "0f1503c92beea0c869610e7a579bcdeeaeef80dc4a5cc79fc7e5c90621b07f13", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "fb2fa392-6080-494d-b6f8-7c331f258812", "value": "T179932852FD814622C6D116B7FB5E428E372713A8E2EE72039C155F2137CB96B0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "d8ac473c-e947-4a30-9eb3-7590536f17fb", "value": "1536:gFRoWT1FVUq3bUpQ9RAKryKyzdY9Ej5rXS4OZd1K697Nvf++7J:gFKWZFVUe9yKyu6FrX+HDbl7J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752801, "uuid": "b53bf714-35b4-47eb-ade7-61a2bd72e530", "value": 93356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "f637cedc-a656-44c6-a9e2-ae2adb754f7f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "021526c7-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "e0f5db52-bebc-41a0-8d24-dc0e74479346", "comment": "Malware payload (Mirai)", "value": "f486490f80292bbe05f7a596f18d69d2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "f7f92f47-ebf6-4b05-a563-f2cd3710c839", "comment": "Malware payload (Mirai)", "value": "0ce082b52d7e17bde880ce0eabfa345c47c0529afcf94226bb1c097773c44943", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "8ac8fc7e-8292-425c-80e1-1561178e15ab", "value": "T1C9C3C74E6F218F7DF368873047B38B25A75933D626E1D685E2ACD6005F6034E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "68a7c817-b7c6-40fe-a8f8-cc03babc5747", "value": "1536:Y88hVKLkQwe4eyJjkKFZITjPCLku7wpa5wU9a7w+8OyOADea2uPNKpslW:YtVKLfwv5kOM+H9a7wyyOATN7k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752801, "uuid": "bc7a7603-9179-45bd-b539-3e1b84c0764e", "value": 118400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752801, "uuid": "c1ad34b3-3de0-4708-b800-99785c7ba4f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff403ec6-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "f2c3f8fa-d845-4ae3-8829-b30351bcea94", "comment": "Malware payload (Mirai)", "value": "fc2c4ad6f71eb9550564cffb79d9f6af", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "446fa5d0-1dd9-4ee4-a13c-37486a8d7599", "comment": "Malware payload (Mirai)", "value": "9627724833a50e015b91353bf94ea78089860b9189447ba59c3e8231094982ad", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "6f2896fe-8641-4749-888d-11517f3467a7", "value": "T12CA34AD7B401DDBDF84ADB7B40531906B131E3A20A831F36626BB967F9361981937F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "2dae463e-e8b0-497b-9aa0-b5a7021b6fa8", "value": "1536:9PMpxBl0//5Su3gtVfd4zsTYCkrr7o8zWA8T3OH6iC2J3m8Ry6KG7QIeW4N0XQ8g:n//H3gtVlu1H7o8zWIP3mOyZe4N0X5g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752802, "uuid": "6b28ca3d-dac2-47d0-9d67-f8b6bfca3e3d", "value": 99704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "4ad783d1-5507-4c3e-9acf-54ad9f0e54c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8774b7dc-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "54f047ea-794b-4770-9876-92bd42e298c6", "comment": "Malware payload (Mirai)", "value": "e811a3566e2458375b721c5489168af5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "9bbd26f3-0387-461e-aaf1-9f4956dd34bf", "comment": "Malware payload (Mirai)", "value": "4d954c25e320adeb7b44a2dfc6bf5c6936e83c8ceb2f14142fb8914edf672993", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "0b27db6b-14cb-464c-96cf-4a94f6062859", "value": "T1BA430855F8818B22C5D41279F92D118E332367F8E3DFB2139E112B247B8696B0D37D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "48ff88d9-8f77-4769-b8c8-1cb36d644fb8", "value": "1536:lJn4GSFuo4oaWPpw3d182XkUlV3kzMIyin2qwdLf:nSco4oVP4LW2qwdLf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752802, "uuid": "56ce77d3-7593-4b58-9ad2-07f4a09f1100", "value": 58676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "8a8d29f1-a046-4297-8ac7-bb3836a185eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff323ee4-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "5fb3a94e-05f8-479e-ba99-e2285106b102", "comment": "Malware payload (Mirai)", "value": "88aacc52cc00c0d143686f3fbc30bc1a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "62d9d173-fc21-4096-9750-61aa9dcdf6ab", "comment": "Malware payload (Mirai)", "value": "9e675e03d343b36b8b54108679c237b7097c3c9db7ebd41f7ac554bf67889f58", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "1ddc5649-408f-4ace-8fb2-f7448125cb07", "value": "T1F6C3ADC7FA8714A1C46206F003C71BAD6F93A221CF5FE4E7AC1DB63B5A7A4DA15163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "ca756a81-964c-49e1-97a5-b18238ab16e7", "value": "1536:KrMjtT/2h9gdeHjV7uXwHlWuoPpsiUckl9kyVcMxs5RpgRCEy/LWZ:KrWT/i9KXwFn+jUck4yVclg8q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752802, "uuid": "6ea56a7d-c46e-46ac-ad13-868123fdd213", "value": 124676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "a6d39097-e2a0-445b-9946-aadff9f77557", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb9e2d9c-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "93e8a4e1-10ef-47de-93a1-dcd3cf184da1", "comment": "Malware payload (Mirai)", "value": "d4196737cef8a31b771eca9b9b8f17cc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "70d3e2f3-f8d4-4099-b31e-94db7395bb4a", "comment": "Malware payload (Mirai)", "value": "9338d333f4e41b794b52355976060e9216fc8916b6753a2f9f8991f17e2eaa7b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "f65a1e83-2c91-452c-9874-4d96e7672323", "value": "T1A0935D02B70C0E43D1675DF02A3F27D1D3EEA6E121F4F688691F9A8691B2D335586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "33709905-5bfe-4d6b-ae81-c1d057249397", "value": "1536:GFsCCOHrTgbrkkoV4SKUgZ5VvHfNaoY04M1ykpAzKY3uVetMuXyCQ7sIER3BfG:LROHrTZkoqkGTAzhRMVC0UG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752802, "uuid": "dba56d84-cc37-4811-acd0-41fa5c5e372a", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "7aab746b-98a6-4c2e-8093-bf1906b93fc3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9c3ca2d-b3aa-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "63f901cf-4e5c-4c40-b1c6-7a136a35fa5d", "comment": "Malware payload (Mirai)", "value": "ab1f9d68d95142c8c8e91d093377fa51", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "c9076dcd-732a-47c0-b41f-a32b4b279426", "comment": "Malware payload (Mirai)", "value": "7f254feef01af2a190c0cd2383ceee0604edee58558fc02182fe012409ecd892", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "c7ad135b-6b05-4605-ad2c-2161f93d4089", "value": "T1E0936C85FB83E1F4D94609B011ABF7798A31DD322024DD6BEB98FE72BC31612911A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "75fdb294-4227-43c2-abf4-65e48a3d49f1", "value": "1536:hqj89KwF8ROXbDccj0P/zHj822Rqoi9pUQ31QUHLKVyMyF+r:64F8ROLIcj0P/zHYBIuiE5yM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752802, "uuid": "91b59f92-dd55-4dda-8c11-6a002cb5fa23", "value": 95476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "a4f99ae2-b7ab-4aef-8f4a-a85381e1f366", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9d226f6-b3aa-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "0a6b5e45-76b1-4b5d-9720-674cc51ef46e", "comment": "Malware payload (Mirai)", "value": "ca713678158e6b4951b2b9b283d59f4b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "1eba0e4a-d970-4dc0-9a39-d53a656a74d8", "comment": "Malware payload (Mirai)", "value": "07a9904362e497b93af1da128d38992b33830db96c9b1361e16076998c21a242", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "31ceb4af-b09e-41da-9be8-9f3f8d3426d4", "value": "T128933952FD818A62C6C126B7FB5E028D376613A9E2EE3303AC255F2137C795B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "409231ba-6e62-4a4d-a662-e04b1ac8d286", "value": "1536:qdYEXG1cVM56a9stYn1Us7h3UPNqIDKa9rS5+m/H3hGQz0Oc4g9jq:qdYEXG1kM56avFsqIN1w+mfg+0O3Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752802, "uuid": "71154dfe-c131-457d-bbea-8087173c7756", "value": 89844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "9479bef3-51c5-42b8-b55c-3cba7d5d275d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd6013e6-e477-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "deb75fae-9389-4adc-b5be-15baecb404b1", "comment": "Malware payload (Mirai)", "value": "98fda6722231a7ed6ff01c25c4be23c7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "fb8a230d-780f-4414-a223-0d0c951a5217", "comment": "Malware payload (Mirai)", "value": "538b1cbce4efc20a2d4edcbb44efb71156279bed31a9f42b07e950548f7e83d6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "775ab2b8-8b13-4f43-8063-c498a6f28d60", "value": "T167936C42B70C0A43E0575DF02A3F57E1C3AA66A120F8FA89790EDE4996B2D325547E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "34a404fa-b9b9-4d40-aa14-f4807834ed90", "value": "1536:aDbQbediuZ6mJYRBNS3LJEr0YN7OQqTzp8asfFzmge2MP0l1WrSlfPp+tID:wQEI4TzGame2MCWr+ND", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752802, "uuid": "148b9c4e-f177-4034-b488-3b13a68973c9", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "6879d7ca-8715-4e77-abae-02fb6f42c853", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff4334bb-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "01a03f5f-d577-4113-b349-1099b9eb96cf", "comment": "Malware payload (Mirai)", "value": "eee98cbc8550e607e3f05794b178aa17", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "7a762053-c9cc-4ae2-8cd0-b41b6d3a406f", "comment": "Malware payload (Mirai)", "value": "931b909773d77ce616e5eeed1751354f3be255b3bfa77578e0db82f70bdba43a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "3f6171a5-670e-4368-8dc7-b1a732cb6307", "value": "T1EC933952FD818662C6C126B7FB5E028D372653A9E2EE3203EC156F2137C795B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "0dc3d91e-6251-45b6-97b8-5e3c5d2fe833", "value": "1536:jxbuV/oeWRynbOAtom7xGJaJa44Bx8ySAN9TwxJSCJonP9eJCQsP2j+ks:jxbuV/VWRynb57uHx8yRtkSC6CCQs3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752802, "uuid": "94ba933d-95a7-4fea-a767-d4275b789791", "value": 89716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "6e9ede56-5fa3-4f0e-9c90-47cfd9479cc2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e91baacf-b3aa-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "cc43c547-7a26-476c-9c2e-5560cc12bcdd", "comment": "Malware payload (Mirai)", "value": "62ea48eb9c08492feb0a4497f2954b22", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "552343d9-115f-4bd3-839d-5961dc908991", "comment": "Malware payload (Mirai)", "value": "570a7d7cec9170763f38767eba4d1acb6a8e7e2700b1bc721bb7cd8657202a55", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "19fbaecc-55b7-46e6-82bb-ed2d0d7bd582", "value": "T11E8328C1BA4BC0F5D90748304067F33FCB32D6394061D66EEFAA9E65EE7364252262", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "c032196b-0a01-4496-bd92-e159241be479", "value": "1536:8l8IhK59kLMSbs67z1WAcanWC8f4TxdgoXF6hKal9:8/hU9ktbX1WnfgTxddX0l9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752802, "uuid": "a3b2f54c-3e9c-48f0-a114-9a3368fbb4d4", "value": 87696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "6a42c6e4-bca2-4e68-9a5c-ca1ae1ddf54f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8794bc90-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "95fcc9c0-38ae-4022-8cae-5e073d9b82dc", "comment": "Malware payload (Mirai)", "value": "3be6c433f7741c74c51360a94f11361d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "af5cbab7-46d8-4f05-a173-b23d95c36a65", "comment": "Malware payload (Mirai)", "value": "a9d01a2e280f28a97733228360f31bb3f94d82cd8c99e2f21108f618e2fdd3d8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "6f611d3e-2cf2-463d-b05c-c1c674e1b036", "value": "T135838D63CD2A1D68D58884B470B0CE395733E502829B1EF759AAC679D047F8CF54A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "971854a6-42af-48b9-b31d-648d8fc4e711", "value": "1536:K2eEex+ag97zJS2FwBxf4LKcxD4qjSXRb3HwCaVhFQTkF:KKex2k2FKx4ucFjSXRb3HwPT7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752802, "uuid": "9d463aa6-fbb2-406d-8fb5-4b9dc8206373", "value": 87908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "5d584475-8da8-4461-ba29-bfecdb06590a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e93b54fb-b3aa-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "6ddf253a-c96e-4410-900b-f754922f5e4a", "comment": "Malware payload (Mirai)", "value": "296732882110eb6e473d61b399c485da", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "cb66640e-1b80-498a-b231-17bbc74ff579", "comment": "Malware payload (Mirai)", "value": "26135616f7e17cf01362cc21ee0a2a10ae5186d136ce6ec24c874181109d7a9c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "227714d2-46af-416c-8476-3a2ffb2c0a16", "value": "T17EC3F909AB614FFBE86FCD3746E90B0529CC551722A83B7A3574D828F64B54B4AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "ff952022-12f7-41c9-9f25-a66128055754", "value": "1536:xNZqs2lYRB1f+g6z3jL3pFLURXkb3+YEwIvF2E+7hQqw5HxZp+/praXbr2F1lIl9:jZqs2lY56TXH7mqw1xi/h+2bmFw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752802, "uuid": "c34f16a1-07ab-4437-b3bd-76b4b935e199", "value": 122496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "835d98b2-fa24-44b6-916c-79275029bf07", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "879eb1be-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "fa2a4692-215f-4a3d-9436-847c571ab750", "comment": "Malware payload (Mirai)", "value": "883c7b8170ad73944d963b8224d0a1af", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "5b520cad-2ac2-42be-b68f-601331d8f365", "comment": "Malware payload (Mirai)", "value": "fa0b37d3c641fdd57113016a8183ec7e841fd4054c50a26ea8117ec1788eaf38", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "e152dc64-f1ae-4ab2-ac2c-a9f17b975f1f", "value": "T1D6232B25FA761F17C0D168B521FB4B6876F146CE26A8CA4E3D720E9EFF618406503A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "a785d588-b4d3-4513-89fd-f5e86c97f9e3", "value": "768:3BoBCOTLxxJDoCtrBy1ZBpUs7f8j24AQkqO+67WuV+wO:3B8vTLxDDrBy1/pUsr8jNAQk46yKO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752802, "uuid": "879a7045-2004-45d6-8d8c-ed5851f27651", "value": 48848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752802, "uuid": "1a8814f2-1e0d-449f-b7db-b904c0bdc164", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a14a736-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752806, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752806, "uuid": "8b47664c-07d5-44e8-88b9-72b8f98361ec", "comment": "Malware payload (Mirai)", "value": "c4cc85476684917668d4051a3ad20c97", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752806, "uuid": "be075650-c13f-470a-a031-2e6ef80e91f8", "comment": "Malware payload (Mirai)", "value": "bf9f9ce8bdfa8766baf6602c1d3ec01a309d6e7af6c25b6935b708408af947bd", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752806, "uuid": "ff7f7260-5e62-4de2-b787-b44dd74954d8", "value": "T19C230851B8818623C6D0127AB66E46CD372563E8E2DFB217AD221F503BD682F0D77F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752806, "uuid": "c38376c6-58f2-440e-927f-b7569f567859", "value": "768:k6pivE2+4ZNsNSOgVhtPift1z9EH/hgih55XiocsK3wn/N+2ZmmOVL1wK:avE2+gNs8zQ5URv9O3wnvZei", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752806, "uuid": "6398db11-905c-4a19-910e-c28a119f3295", "value": 46812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752806, "uuid": "d2255d7e-7f8c-4e4c-b216-b94af7f3db39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a1b390e-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752806, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752806, "uuid": "6b0a8cf8-4396-4861-8099-b79970fa8de3", "comment": "Malware payload (Mirai)", "value": "0d92a2122e93e227a653397d186c4654", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752806, "uuid": "a1c94a92-2455-41c4-bd94-8a7e45918564", "comment": "Malware payload (Mirai)", "value": "7a230c866f44cec2e20b1d146f0f2cef759a7642f41981c0532371cc98f97cfa", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752806, "uuid": "16bf06f2-6d52-483f-8e23-b102d76d39d3", "value": "T1791319C4F543D9F0DC5606703076EB365E36F5F6222CE683D3A5DA73BC92602A606A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752806, "uuid": "532ca5c4-1c92-4578-ba12-3665af362303", "value": "768:uQHB/Ghrvh0z1hht0lAcjSoA/dLuuuDjyAbG3wVFs:ZFGhrvh0z1hht0lX+oQLcjLbMwVq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752806, "uuid": "d84c00bb-4870-483e-9637-a0211f1e1c0d", "value": 41776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752806, "uuid": "c03a48a3-7d9c-44b8-90a8-57114377cf3e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a43a6a3-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771752806, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752806, "uuid": "da86d9cc-c20d-46a1-acde-01051d56fb87", "comment": "Malware payload", "value": "bd3788a7dc1ed344e54cf9475cc9dd2c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752806, "uuid": "bd2181c5-ddf1-4ccc-be75-3822f774d133", "comment": "Malware payload", "value": "f9128964a1ce74a0e10a3abf497028981d7859875e8d565f2b880aec9bbd6b7c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752806, "uuid": "9262370f-f165-4ffe-b5d9-4a180fbcac92", "value": "T1EE134B12721C0F17C4A31A74253E5BD1C7BEAAD022E4F389661F97A68A75E371482F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752806, "uuid": "f7994802-dc54-48e0-b4df-ddcc53c247cb", "value": "768:kTUU2kGhb7ZRIkR+WRzEyf4P34Qc/JYQqOFBqZzD4y1QvB9udRwLk:mUUGxNJu3gyj/1Qpkd6Lk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752806, "uuid": "9e8e459e-3e51-46d6-8dab-39a786b48713", "value": 43764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752806, "uuid": "c3213d18-867c-4b7f-ada8-9a673cc427fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02274dfd-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752807, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752807, "uuid": "aea74760-a0d4-4aa9-82f0-3669c9b3f375", "comment": "Malware payload (Mirai)", "value": "fc98dc6939e097e3e23f78366040cf57", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752807, "uuid": "b23c205b-2221-42f0-9f0b-0eeabc55ee6d", "comment": "Malware payload (Mirai)", "value": "e7d9108c3c3a5a5c7c21627dab473da9f95cf8f5947b56f3d20fd7e2acde7de4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752807, "uuid": "a13004b3-e13b-4125-a20e-f991ddebbf1d", "value": "T11A839C33C93A0E68D84845B4B0B18FB65763E51581972EF7499AC63AD083EDCF58A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752807, "uuid": "72e21b99-7473-4e8b-b9ee-d2b06a8ec42e", "value": "1536:lgynxf8zTG9xM4AefRQKRPLSkC+RCaR9HnHyW:lxnx39GcR3RXC+Rvdl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752807, "uuid": "c97d0682-4a1a-49a1-8501-46f58960f59f", "value": 83812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752807, "uuid": "c1fffc15-f93f-4671-83f9-cf66208fa715", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9bb7e99-b3aa-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752808, "uuid": "dd67dd93-792b-4e5a-ac15-50940be2c7a8", "comment": "Malware payload (Mirai)", "value": "8d7551a247dd34ba91708caa926149fa", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752808, "uuid": "e4671eb3-cff0-470a-9f7a-5073ae2d850b", "comment": "Malware payload (Mirai)", "value": "d50aecb0f7eb8eb141a719817b886b1853c1804d3f5dec89f18431f3295f80d2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752808, "uuid": "21dd968d-1ed9-4cd4-b873-b6ad9d92731a", "value": "T159A338D7B401CDBDF84ADB7B4453590AB130E3620A831F36639BB967EC761981923F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752808, "uuid": "b20795aa-c1d1-47e0-bb7c-b3cdc7e19516", "value": "1536:MhzQ1QMfF4B+IOpnhNWB/vrT4ncBDx6q8n36HrQzCJ3GONN6KXL2NQkru/pe+q3:M+4UIenhNA/H+cBDx6CR3GQNZwru/8N3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752808, "uuid": "9bf76f44-b33f-4e78-85bc-957dd9f7cd2e", "value": 99848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752808, "uuid": "76b83ca2-1317-498c-822d-196d65197d19", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb6e44ed-b3aa-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752808, "uuid": "5d422953-1278-404b-bd6f-2ca111e5d3bb", "comment": "Malware payload (Mirai)", "value": "f0e300b72171dae3ec2e64755b2354c8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752808, "uuid": "00225353-1f05-44c4-9ddc-269f8b96fa52", "comment": "Malware payload (Mirai)", "value": "299d6c031cb611b98daca4d6a8c9d03d6cc54b8e6da9d39c845d6475f3cbe2a7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752808, "uuid": "e2c61f71-f81d-4b9e-8b26-852e5a391103", "value": "T116935C42B70C0E43D1675DF02A3F27D1D3EFA6E121F4FA88691E9A8591B2D321586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752808, "uuid": "8d74f571-ecf6-47bf-a3c1-7839f91e5cc3", "value": "1536:gwiReU18TQLro6XLio5o8lVBbbH7h5K0UvGW4BAfKMcBRWFMOXyC/D0QLl/HOo:oMa8TF2jb1jAfGSM1CNko", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752808, "uuid": "f8116e1b-778c-4fbc-b906-3f389f0d18ad", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752808, "uuid": "d8c41a7e-4b0f-400a-9a2b-7fe23ccafaff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9c5376b-b3aa-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752808, "uuid": "e27b28a8-8e11-445e-b461-a6f053bc472b", "comment": "Malware payload (Mirai)", "value": "7bd200288cd266c71bf17d15fd0db01c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752808, "uuid": "877e217e-f634-4218-987f-6f17aac80ab3", "comment": "Malware payload (Mirai)", "value": "4ebf1dd6fa6438fa23b5293f25bd4f7ed6a011870ff712fc6273e2531aa5583f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752808, "uuid": "480b0fad-7cf9-479f-981e-767c59b77a8a", "value": "T1B3C3AEC3FA8714A1C46206F003C71BAD6F93A121CE5FE4E7AC1DB63B5A7A4DB19167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752808, "uuid": "9f952504-7344-4641-b478-de8814faceec", "value": "1536:gcjBfdqDkFJ9MStjbEI5WOoP/9U/D9Qzld8a2lcqxs5Rlg9iEQ/LWJ:g6fwDu1bEOn+/9Ub9Qzwa2lcHgOq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752808, "uuid": "fb52e71d-171c-46d5-938c-2a7d446ebeb4", "value": 124676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752808, "uuid": "630d2f7d-3fe6-465a-a149-93d0f6f83fff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff3c0c4f-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752812, "uuid": "4d2940cc-005f-4f7d-b03d-82c4b7dcc654", "comment": "Malware payload (Mirai)", "value": "df0bef96d0c2e6c26fc7b560a7c579dc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752812, "uuid": "a948a26c-9ad7-4ace-90ef-1a23c1397fe8", "comment": "Malware payload (Mirai)", "value": "435b581583f7f42138e67bf16a7bedb9e7edbb321806daac96be7f171aba0737", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752812, "uuid": "29c61130-2c14-4a7b-80bd-d2b0bd4e5a22", "value": "T15AC3F909EB614FFBE86FCD3746E90B0525CC551722A83B7A3574D828F64B64B4AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752812, "uuid": "aaaca74a-6112-4842-ab12-e943363b3f51", "value": "1536:1NyKMWFSdRBVf+g6z3jL3JsYRX5sLuYk+ot2Le8hUK3ZanZJeG7r637oFW7MnS0P:HyKMWFIZ6TXQKK3UniG/L6rLS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752812, "uuid": "0b3b2a18-60df-4c4d-82d8-b4d366bf0872", "value": 122496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752812, "uuid": "9ec4fd9d-8ba1-477b-b5ca-e59a112ab270", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb99f77b-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752812, "uuid": "b523ef2f-e2bc-49a3-81ab-aaae5f582589", "comment": "Malware payload (Mirai)", "value": "e422435a52bb0f3fe97428c687567b4c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752812, "uuid": "d46494b1-5316-46e1-9a83-68d9165681af", "comment": "Malware payload (Mirai)", "value": "8c90012c315f28a76dbb7d3599a36302391377a4ac88663ed5e91f2ac27bac3b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752812, "uuid": "a69ac9bc-7908-4ddd-b5e1-1619572527ac", "value": "T1AF8339C1BA4BC0F6D9174830806BF33FCB32E6394065D25EEF6A9E65D93364256263", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752812, "uuid": "1cfc39e9-f782-4218-9616-e6363dfa9eae", "value": "1536:q1BK59Eb0SI7+rRgoXWAcanWiaSyzRigopFXKShkRL:KBU9EVI7+1zXWnplzRidpVAL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752812, "uuid": "ac2c991f-f858-48ac-ba9a-e68f4f8f9a4f", "value": 87696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752812, "uuid": "8e0294a3-712e-41ec-9206-a905fc4596e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a80ff201-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752856, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752856, "uuid": "b102f5d2-ebf9-4dd1-9354-e7b21759d46c", "comment": "Malware payload (Mirai)", "value": "8e23aab7baa656931cbee404289626ad", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752856, "uuid": "4a3a2e92-7b35-4514-a3ad-82156c4a4a6f", "comment": "Malware payload (Mirai)", "value": "b8df72073674b33a20dcb9e597831f7926f8a0cb999dfd0f5d30d92f6fbd354b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752856, "uuid": "a1a52a53-5558-4510-9b49-8945884d8611", "value": "T14F137C7AE8AE5E54C0060170B4A89F381F53B1C493532EF71E9682B15887AEDF914F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752856, "uuid": "11d2f218-3a7e-432e-a736-058d8d27e948", "value": "768:ia1gMeGYyAO+N392LrlWvCbmCAo1aTNmCEQw:iaSM//X+7EEvWm81+mCER", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752856, "uuid": "94f154cf-1e3f-4fea-8808-458127715cd6", "value": 41980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752856, "uuid": "86a7d298-5ba4-4ab3-b969-dc2057624ac4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed9e9fba-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752973, "uuid": "6e8b4bd5-e1d2-4105-b290-61b416371137", "comment": "Malware payload (Mirai)", "value": "d5d94c788deedef9a23e28ca1f916afb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752973, "uuid": "077b241d-90c2-4279-a863-f040f6928ea3", "comment": "Malware payload (Mirai)", "value": "5ed8a70969bb4dda407debf7e8a951c3c32b87d27a72dd26db2969341bffb1ac", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752973, "uuid": "63d6b69d-7ae7-459c-8860-ba8062cfc48b", "value": "T1D523FA63F84286ABC2D012B2B66F9B49376313FAC2CBB353E91543507B9650F0D63E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752973, "uuid": "175a4d8f-26a0-4128-beaf-31618b099141", "value": "768:tGr1LIfNmapEOcG5kIVsiJnzquRqZe8UOxagsoSb7KmKSoyk2IymQY2AUm6hh1Ll:Mq15ERG5kIbVWuRIvf5stCmKF2IymQYk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752973, "uuid": "2490fd9d-f62c-4c1b-ac06-2b4b97ceefda", "value": 48052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752973, "uuid": "5c0dfe61-bf96-4700-9daa-72c8b068f399", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edc73c0b-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752973, "uuid": "9bfffd06-4e63-42e0-b9bb-840fa185a29c", "comment": "Malware payload (Mirai)", "value": "1bd5987e1c6120171dc3d22fcddd21ec", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752973, "uuid": "9618d67e-3bee-4263-8c9a-f1655ba26710", "comment": "Malware payload (Mirai)", "value": "84ae516eb63b05a351c4944d196b922af3825c52090c6564298c3a1af6cd6e9c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752973, "uuid": "c0633392-0eb1-45f9-955e-03cfedd1c880", "value": "T18514965E6E228F7EF668C73147B74E249B5923D627E1D680E2ACC1105E6034E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752973, "uuid": "954c6832-ff09-4b34-9a88-ec800cd6a435", "value": "3072:jUrEuoT986IQXgRVCefC6AbAP6rckC9ytr/6hh1a1mHD:jUrE1TeqmnHA9r+9yh31mj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752973, "uuid": "8f50c37a-c7dc-4637-8918-26a3e5424ed1", "value": 199168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752973, "uuid": "f0d96ed7-54e7-404d-9a3b-85f7cf426c1c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eddd790b-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752973, "uuid": "a726ac55-8b66-4554-8302-b7e431188141", "comment": "Malware payload (Mirai)", "value": "934d4716b441ad7185764c26d09ab3c7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752973, "uuid": "e94d487c-b955-4032-9eb3-f4406fe132d7", "comment": "Malware payload (Mirai)", "value": "688f61f547d837530d6903fdebae6c97539a108856c7d8b5849010a886153069", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752973, "uuid": "158b0d54-8016-49bb-9cfd-d67de6741294", "value": "T1CAE31A45FC414B67C6C212B7FB5E428D7B2A17A9D3EAB2039D255F20378B85B0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752973, "uuid": "a6baa139-d1c7-4d7c-b1d2-e231c7ee585c", "value": "3072:MquVG6UmaUm2HcNbw4uFvlAJBAxZwZ64c6hh1xZ:MquNUmJn8Nk4adAJ6LwE4lZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752973, "uuid": "988d3292-0af3-47fb-a9ba-efbe9db685c1", "value": 151072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752973, "uuid": "8447ce40-64a9-40e3-9e24-ed94e2cfb3e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ede881ab-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752973, "uuid": "9177e909-d27b-48fe-ab5a-7aa9ff111316", "comment": "Malware payload (Mirai)", "value": "e6f22b5c77c7784853bb27645af424f4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752973, "uuid": "6a008e39-f053-4d9c-9ed2-fd0a9f8e7df7", "comment": "Malware payload (Mirai)", "value": "6768cfd407400261ab449ecc93ddbf020c8335bd9dcbe9493d93b73f2ff8f594", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752973, "uuid": "3506b03a-97c4-48a0-85ad-c0b159c5c0bf", "value": "T1BB14D71AAF520EBBD8AFDD3302E90B0139CC555722A47B363674D528F54A54F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752973, "uuid": "d17f2622-e9e9-4c05-a37f-1aacd90e4584", "value": "3072:x8ntMibJebE/IEJVxqGMPLOh33Mjk2E61A88B6hh16+K:xICibJKYIexlELOpgc2A8o+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752973, "uuid": "44facaaa-163b-4a64-b9af-3757556a15e5", "value": 201184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752973, "uuid": "15b8a584-5923-45d9-ad47-b8064d9b25fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edea4008-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752973, "uuid": "2fef88d8-c4b5-4e87-a8cf-f1c5ccb95c67", "comment": "Malware payload (Mirai)", "value": "9935952f2146f8ddac27785fdb95a895", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752973, "uuid": "192a273b-96b9-44c7-b9c1-3e2350b1be98", "comment": "Malware payload (Mirai)", "value": "1eb7b53d6cb732ef77ace905de14e65211465231e598c1b5f9a324b82fb256ab", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752973, "uuid": "fd4d52f6-bd31-448c-b76b-be5b01705f34", "value": "T199F31A56F8818B16D5C211BAFE1E124E37131B7CE3DE7213AD246B707B8A86F0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752973, "uuid": "9d34d799-27f8-452c-9d5c-db4fea7191ef", "value": "3072:+LhJ7HLgZQvlA3dXfo3rOMaiWuxc9+VdMVnLmxEYC1P6hh1Z0u:+LHLU0lEXfOHaxO7VdMtmxhYY0u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752973, "uuid": "5a992714-c420-4db3-9b1b-ccbcf276f2db", "value": 164636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752973, "uuid": "168f0a0b-75a5-46d9-9fac-8d3c09f1e8aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edebd736-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752973, "uuid": "02f7b325-a1b5-4210-b32b-4037cda5072a", "comment": "Malware payload (Mirai)", "value": "e74b21199610f5e80e41509cf7fff01b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752973, "uuid": "62b279b9-8c0e-46c2-b90a-89f7888a1918", "comment": "Malware payload (Mirai)", "value": "740e3d221957b9d322e4643d2c557540053d93c75e1bef6f8df71a17afffec81", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752973, "uuid": "096d5143-f7f2-43f5-87a9-aa8faca4b92f", "value": "T17D0439D7F800DDBAF80AE73708570905B630B7E600929B337257756BEC3A1991977E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752973, "uuid": "94afa2ae-5fec-4f20-9d1e-725567b5e54d", "value": "3072:16cnuTglZ6YtVSZgthVDf5YzegJ2Ej9/VNjbisLv1pNycAYAuh/F5Q6Q:XnDBYDFj9bLtpNycUqQ6Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752973, "uuid": "72da7c1d-8165-4de7-aff8-8563afb22003", "value": 173280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752973, "uuid": "5af8bc87-089d-4b9a-90ed-0fb7abb356a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee875d2b-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752975, "uuid": "42dd7e8f-f82a-44eb-abfc-9fe098bd5688", "comment": "Malware payload (Mirai)", "value": "ce0116c5bf7306da8bf5fa6e196a9f26", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752975, "uuid": "a37d6eea-ae42-467e-a03a-b17b64fed622", "comment": "Malware payload (Mirai)", "value": "1476e80fd7c72624b7889c3271f5f44bda51075983c3f8f3d52a56f22a3b7c3d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752975, "uuid": "f71bb152-7b0f-436a-a348-3625274bd13d", "value": "T1A0E34A02B30C0A47D2632EF03A3F2BD1D3EF959221E4F681756F9A8991B1D361586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752975, "uuid": "56871f6e-1b13-4026-83ac-1d801eb9f960", "value": "3072:G6ky5OxEco4YccEmJYuokNTalKHV6hh1TTM/:G6ksOxEcsccEmJYZUTwHM/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752975, "uuid": "511f3c47-641f-4628-b0b2-b013bcf80766", "value": 153884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752975, "uuid": "9629b28d-b1ab-4d05-86ca-8d4ceb970ca9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edef3e88-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771752975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752975, "uuid": "5e0b0b45-5230-43a9-aef2-60cd1c118db4", "comment": "Malware payload (Mirai)", "value": "66c69d941edea88753275145d7c5cd88", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752975, "uuid": "e658762d-acbe-4215-8891-a3ca11e6e405", "comment": "Malware payload (Mirai)", "value": "a5aa9e327fbdd18063aa0bf3832bac22f02ab783c48232e28a9af3d61659337c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752975, "uuid": "3a6b6d79-2ba6-47d6-ba13-21f38497f27c", "value": "T126F35B07F5C084FDC896C1B44BAFBA36ED72F05E1134F26B27D49A621E5DE201B6DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752975, "uuid": "eb328314-010e-46c3-860c-d2bf4ab472fa", "value": "3072:mMBxAhJMJdMjUAZxRlbqZw9jpbiiShhfHsAi6ELZ9hYx1Hy:lHAheX6TpKTOky", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771752975, "uuid": "d677595c-ca28-439f-89a7-93b01be91714", "value": 159224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752975, "uuid": "d4add990-dd7e-447f-a0db-5798c05f4125", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a026ee9-0fd2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771753155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771753155, "uuid": "303ad616-dcc6-46c1-924d-758159aabd64", "comment": "Malware payload (Mirai)", "value": "dc78d5022b48ce467860c9348581f8d6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771753155, "uuid": "e1bf743e-fb5b-4d33-bcd5-3f45024c4266", "comment": "Malware payload (Mirai)", "value": "68d7893dc16ce4f4966c869b1527634d3635b86243bd09b30eea831170bf306e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771753155, "uuid": "1c5cb153-9702-4eb8-824f-5a011bd31693", "value": "T12A515BDB12005B719618855FB7F035B4624AE0D6AADECF14FB4C182E0FCAD4C7685B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771753155, "uuid": "8009b652-d65f-4c6f-8acc-52c2183cc431", "value": "24:MF2JMAebiBoLuZzEgEnE2EhEgoGbwrgJUf/AhM3k:MF2JMAebiBoLuZzzcvysGbwzAhM3k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771753155, "uuid": "e7e7fd9f-716b-4789-b22d-bedb972e270f", "value": 2907, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771753155, "uuid": "1e999acc-559a-49da-8c9b-e205f4bb1193", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9d18451-b3aa-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771754774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754774, "uuid": "de4ca9eb-5870-4508-9e42-20a4e2245f92", "comment": "Malware payload (Mirai)", "value": "41a0ef6843fd132d82d0082a0c99b99c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754774, "uuid": "2e14609e-5813-4049-9a40-2bd082710ae4", "comment": "Malware payload (Mirai)", "value": "24baeb75e2dccf8d13daf971933a5ba53262b85bb41aa250a539ecd3fddeac78", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771754774, "uuid": "7898ea7e-9b1f-49e8-80f6-506587f73556", "value": "T1FC333A02957C1A2BC4D0A77311A74363F2FA2B5541D4E68FBD760C4FEE983502ABB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771754774, "uuid": "e618719e-799d-4fe4-94fb-59811b39107f", "value": "768:WdoXL889wsGBaU6bhlBlLKUo7uVW26lKGpa2FRxdWSRIzV4GMIZ/Tfi:WdiLnqs2Ub/BlLKNHlKGkOxdbIKsi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771754774, "uuid": "ca186199-bdeb-4e4a-b387-06ce58090f46", "value": 53820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771754774, "uuid": "a5d2d464-350b-451c-955a-2842c9f205f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0224efc7-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771754775, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754775, "uuid": "3fb19061-1fdb-4aa6-8dab-a95b15ff496f", "comment": "Malware payload (Mirai)", "value": "a24aaebee3f44f87cd6b151098858b09", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754775, "uuid": "3ce745e1-cd47-4968-abca-fae36bcd8ca6", "comment": "Malware payload (Mirai)", "value": "70f0c5b089d59143fcadcca06d67dbbbfe4a4136270fe714ecfeb28bd302e249", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771754775, "uuid": "3c67280d-44f7-4303-ade0-c8196297a174", "value": "T1DB33391295BC1A2BC4D4AB7701A74363E1FA2B9541D4E64FBD220D4FEF583502ABB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771754775, "uuid": "f1a9e20f-ac30-4459-9822-ac83c83ec91b", "value": "1536:SK8kL18buuQJHtK++mmyuSquydBQdSM4pKrt:S/F0YZ6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771754775, "uuid": "590bd3fd-04ad-45a8-ae34-16b0ef4c969c", "value": 53668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771754775, "uuid": "a99e8f59-5f5f-408f-b030-68d3d9de2c0a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f9572e7-0fd7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771755419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771755419, "uuid": "dadb624d-5b15-450f-949e-0a6f25a02c0b", "comment": "Malware payload (Mirai)", "value": "3407350e74d08dbce042bda25f558125", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771755419, "uuid": "f20ce75a-c3ff-4425-a082-e53f2827e0f8", "comment": "Malware payload (Mirai)", "value": "d4a013cc43df68e54e4315efc5ce4cdbe22e387d22cb4895d51881c7ed2e6bf3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771755419, "uuid": "cd542d9e-2dec-4fa5-a2eb-41d55fda2a6c", "value": "T1BDE30946F8819B12D5D111BEFE1E128E33231B78E2DF72129D246F64778A9BB0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771755419, "uuid": "48091176-46e9-4a1a-9777-a252d6c801a9", "value": "3072:HjxHwkUhXM97XM/bz4na5EueJKrdCRby:HjVwkKq7XqbzSaxvdCRby", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771755419, "uuid": "e05028b9-9875-478e-bf0f-d816cab1b267", "value": 147388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771755419, "uuid": "78e79963-6760-491a-a022-49c9485babf2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92ca9287-0fd8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771755827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771755827, "uuid": "714e3fa5-e21e-45c3-a821-0aa94d3ee5ac", "comment": "Malware payload (Mirai)", "value": "4eede3e9369350274c743ca32278e1a1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771755827, "uuid": "3cf945da-e89b-4502-971b-d7017652a193", "comment": "Malware payload (Mirai)", "value": "9980df3ab1d38c47d472617a993ab1757a649ea0c3a28a7f97551711bedc8f3f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771755827, "uuid": "30150a93-8ad7-4b38-97cb-91ea594376d3", "value": "T119042B46EA404B13C0D627BAFADF42463323AB5497EB73059528AFB43F8679E4F136", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771755827, "uuid": "1d8f6a56-11fc-4f47-9ce3-13cbeb7773ee", "value": "3072:cZ3jyJNrdwZsctacyL8l5y1TAehLLjE3RDrRoNM/RSj0LYJuy:cVjcrdwPtacyL8l5yxLLjE3JiNM/RSjf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771755827, "uuid": "52666ba7-618f-4264-be33-c310965a2337", "value": 188102, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771755827, "uuid": "ce690407-00dc-4488-b4e1-c5eb57b2c0a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4872a9a5-0fde-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771758279, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771758279, "uuid": "3cf7e79e-9d83-4fd8-a3cd-e7922fd67a45", "comment": "Malware payload (Mirai)", "value": "164493252952eef01cec641bc0a2d57c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771758279, "uuid": "2c9faca7-92ad-4b48-a1bc-4e552f7746c4", "comment": "Malware payload (Mirai)", "value": "45a132b77979688bafae99c92ed476940dbb95e0ea5f8ae225a0073132c3c0a3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771758279, "uuid": "342de9ec-b642-45fb-bbfa-bbd232440837", "value": "T115D32B41F9405F23C6D512BBFB5E428D372A17A8D2EF720399256F25378796B0E376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771758279, "uuid": "5e172a7d-70f8-44ee-950a-8418f4c5613d", "value": "3072:omJYZsT7bjfd7Wq84o4e5+nBA1dMi/T5ip:omyybzNP84oB5+BA1dvLop", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771758279, "uuid": "77b59b15-e991-43ee-841b-7789a7f65465", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771758279, "uuid": "8a89864f-87a0-475d-864b-e4600539fc8f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7930f9cd-0fe0-11f1-8369-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1771759220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "796142df-59b2-4b18-8885-1ff912bc375e", "comment": "Malware payload (Kaiji)", "value": "57748972481676c33918763a14993d2a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "e3f789c9-9acb-4359-93e2-548ecd499292", "comment": "Malware payload (Kaiji)", "value": "9f73a29ebf4031678a74cc3a45e41d741bd70c2000417c1b54fb6a0176d39abf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "705c3f84-2cf8-4925-ba12-224659f52308", "value": "T1CB951711F98B54F2E9071A3104AFA26F27319D054F34EBC7EA40BB6AFD776D209322", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "2789a3da-8aa0-4881-bafd-be6cc1994480", "value": "24576:ae9ufJvk4gQjMNRfktnsIXvZFyD9i+MPCIxyuzNqssZXJjTbdYVVMtIwWz1v:WYMnwRO4ssPDd5Wz1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771759220, "uuid": "dbef5e56-64ec-4e72-a695-f5c09620a76b", "value": 1916928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "cdec2d19-af87-49ad-b107-e4a589b594ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "793a0ad9-0fe0-11f1-8369-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1771759220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "1710fd3f-f6bb-4e12-99d1-0af54703bbd6", "comment": "Malware payload (Kaiji)", "value": "da149c6fa2bc595bb1324667c77c2261", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "743e2baf-8dbe-4e2d-8954-2301bab36b04", "comment": "Malware payload (Kaiji)", "value": "38bdf739a7cef90a31077fef06b7b18b005a7b334ad2df785a5e086ef976e7b8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "ae966ed2-ff67-4cae-85a4-2ba3b487010f", "value": "T110B53A137F28D70EC71521344DB2CB94676A6C8A07D6A517BB81F319B8B20AC4E6ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "a53079ca-76bd-4a57-b394-5bd36c643b3f", "value": "24576:cdz8hxtvZ8T0p+gpvRYvyVW1Z0lWJ/RVXbwqel9OFI+TcR:TFpWJgqelga+u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771759220, "uuid": "29bfc1b9-bce8-4c63-bd5d-dcdef43ea056", "value": 2293760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "b966d2fa-fee3-4c77-a95f-71f051fab2dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79417d25-0fe0-11f1-8369-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1771759220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "aeffb7c6-5762-4a91-917e-98fb07bf9e5b", "comment": "Malware payload (Kaiji)", "value": "1bba32bf4fcb8185e174e741a1059d3f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "5e7cc93c-1daa-4f5d-9c8b-3c3ca98ee858", "comment": "Malware payload (Kaiji)", "value": "047180266dd064a61970766e88c9f476e8a42df443e5c747edfaaa0d447a455e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "18fb15ff-068a-4792-8be2-e34b217cf0a3", "value": "T14C955B85BC9DA912E9C97EB56F2502D07225FC4D9F81C7177A00BBAE6DF23588F213", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "a4a1d62b-7e09-451e-95a6-6e9ade0fd4c4", "value": "24576:/wRmgu8dG9qDQtfTBmW0NREmCNPCp98U4TprOEa6QWgrz1v:/euCG9qE5BS5AUrz1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771759220, "uuid": "a45c5cd6-9de5-4b03-af16-d37588036317", "value": 2031616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "fda846b1-da73-49f0-a916-d833dab6c44f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7955d4b3-0fe0-11f1-8369-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1771759220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "04fdfd1d-688c-419b-b395-b29952f9d584", "comment": "Malware payload (Kaiji)", "value": "e3773f2291cb42ff45896ad6c8fe16e2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "d194fcca-9319-4d75-99ec-a93ecb8709af", "comment": "Malware payload (Kaiji)", "value": "559815c2516f4591ae3dee11aeb1a24eaae784f1dac32edd92bbb03f3d9fd548", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "7a5a83b2-a71e-473d-ae68-02abc6761c41", "value": "T1C3A50857B8918542C4E42677ACBE81C833635EB99B8663266D04FE3C3EBF2D90E353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "3def44d2-664b-45ad-a8d4-78542bf6d7de", "value": "24576:JgCbFbDVZ7bVCj3ozPQPTUkrtQ05OYRWNOrdErF4ff1kRrKnyVhv8uofvsRWA1SH:VCWIuM2T1s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771759220, "uuid": "dbbe01d5-9f9a-4964-9596-015ae5a83ceb", "value": 2097152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "dae994b9-3712-4221-a6b6-ad7db36b6d0f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "795cc549-0fe0-11f1-8369-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1771759220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "cb0d4a03-851f-481b-beab-0c904e128f65", "comment": "Malware payload (Kaiji)", "value": "451374308f49c3b0f54d27f25490cbb0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "01862b72-a32a-4171-ba62-a42bb7674699", "comment": "Malware payload (Kaiji)", "value": "0a70d7699c8e0629597dcc03b1aef0beebec03ae0580f2c070fb2bfd2fd89a71", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "c2d3f665-7e79-4805-9b7b-da90307c82af", "value": "T186952847B89156A9C0AAE234CA664252B761BC991F3163D73F10B3F82F33BD45E393", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "6595aa0f-19ec-45c4-ac2d-d4881f389b7a", "value": "49152:XXPVKrbvGOQLeS7rb/TCvO90d7HjmAFd4A64nsfJrkaani38k4B+g2vUqHOErz1:tPXZz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771759220, "uuid": "66cd0803-d460-4a14-971e-c402c8857900", "value": 2011136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "e82f303c-5aab-40af-898d-71d26d9be73d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7963b561-0fe0-11f1-8369-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1771759220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "aaaa68a5-a7c4-4b23-95cf-d43381fb7862", "comment": "Malware payload (Kaiji)", "value": "353f3075ff28496f57fa77cbf4350f97", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "bfcd7d81-820e-454e-a2bc-6e8a4c3f3f1a", "comment": "Malware payload (Kaiji)", "value": "4573abdd37ca1cd203befc3843c43c9e95dbbab8e40ac9d489293ff55ab0b2cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "72e3825b-cd79-4ab3-b0a8-0d2dae113f83", "value": "T1B4A5F857B8918552C4E42637BCBE81C833635EB99B8663666D04FE3C3ABF2D90E353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "652958f3-53b7-41d9-81a2-3f2852d2cdb1", "value": "24576:J1rMILphWsdRm6vM7lUVJtq8wfe9OqbVgYQ3k48jtIMoG34yJnWVh1BPnjKqZdtX:JVfjm4Mo2T1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771759220, "uuid": "6eb6fd25-25a4-43ea-bd56-2dbe2b7759b5", "value": 2097152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "6d4700ca-734b-4ca2-b119-342f1390bf75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7965a555-0fe0-11f1-8369-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1771759220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "9afa7c64-efbe-4075-be46-8254e6be0ed5", "comment": "Malware payload (Kaiji)", "value": "002ce195e2bcb0028cfd10b0ab3603e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "15c22377-474d-4a8d-8686-8c6c8c1b3936", "comment": "Malware payload (Kaiji)", "value": "b0b5bc89370f00b11f44d9a260bc0d234a94ab8c5c3d65eb3346488afcbeeb27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "ad25d06d-36fa-4db2-b594-9729448c88d1", "value": "T193A50857B8918582C4E42677ACBE81C833635EB99B8653266D04FE3C3EBF2D90E353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "36c149ab-3c38-459e-9b2c-5b7c67115ef2", "value": "24576:gNwGGRggwEGpD5IaZIJzIDgliOAMUh1Rskiq1zpQHCaRU7axVL0rK7k3dVh/cviW:VrcNoL03z82T16", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771759220, "uuid": "74573ec0-9097-4219-8286-61621ae38b5a", "value": 2097152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "25f70a51-8a73-4cb0-85b7-483d74dc789a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7965be9a-0fe0-11f1-8369-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1771759220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "b6568977-9549-4475-ae0d-3bc3b52d1645", "comment": "Malware payload (Kaiji)", "value": "f917e4b714be613d75531efd532df4f3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "8e6d4846-1c64-40da-aba4-4b327b0ca7dd", "comment": "Malware payload (Kaiji)", "value": "b81aab4eddcb6683f9446aecd376b050efb2e37a28d61a2c349d6a5bb82028dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "7ea24692-934f-46a8-8a52-83fa93a9cb48", "value": "T1D0B5F8117F49EE5FD69422354EA6C33833967C14C2A03133AB51F7292FBA2B88D5AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "3aa339a2-4239-408b-91cc-0d273d247fe4", "value": "12288:WY8Zinp3M6B0XBgI19CUdMp3LAQh1CapAaxVX4ltPuMFLgbM8yn+kvgftZAMcq+:bm6WBk7XVX4lRuMFL4o+k4fcR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771759220, "uuid": "b73203aa-eea3-4d44-ae2c-89276ad3086a", "value": 2359296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "2a7445ab-d76f-47ff-b2f3-b37a493c13b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "796b6353-0fe0-11f1-8369-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1771759220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "7ab4f84b-fdcc-4200-be9c-2ece1ddaaca6", "comment": "Malware payload (Kaiji)", "value": "00cf276afac080bf18003d588fb2ad87", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "6f4ea26f-88ea-49a9-8ebe-5e1f4ecc7c99", "comment": "Malware payload (Kaiji)", "value": "ddb124c4b980091529a01dd544c0dc6b278d48b376ad1a313bd11f3e54a0f31b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "72efc40a-27f0-4e32-9451-5120b7299c40", "value": "T151B5F80ABDC16F7AD59C03354AEE165A23513E495B91072327A4F7B83A7733CAF1B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "b207866c-4d16-4661-882a-248ae7af455a", "value": "24576:mU9tyqIId8F9/dQbZ97G8JRC0OVXc8RuMFLGk+koAe0G4Zz1v:AqIIqrlQtO04uM9Gk+CeCZz1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771759220, "uuid": "0fe34e35-b3d9-4969-b0f5-881f16fd149e", "value": 2359296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759220, "uuid": "554f1d1b-abae-4ee6-b9fe-380a5fdc94ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa614531-0fe1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771759866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759866, "uuid": "8dcd5fd8-906a-4404-bc0b-4f1831a2f0c9", "comment": "Malware payload (Mirai)", "value": "74670c013b052853add5cbf608ad20ae", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759866, "uuid": "2fb0ec75-0e68-490a-951d-bf5071e371af", "comment": "Malware payload (Mirai)", "value": "e25cf2975c9b954f57f9806856751985b482070d836f26ccd8431fcb5f030e7e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759866, "uuid": "128f8c39-e8ff-4b79-9f31-8f8176365d76", "value": "T194934AC4E683D4F1EC5705B56137F3369732E436202DEA47D369AD36ECA2950DA0B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759866, "uuid": "b3699096-f1df-452c-9e47-6fef3bedcc33", "value": "1536:5jjgcjCiP5qc0iY9pPMzJrdCTAiPq7RcPWivzNosjq9KQvOTSTflHuI1:5vZjCiP5dFYjMzJwdPEwWivBjK/O+TZt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771759866, "uuid": "954806cd-a5e3-45ce-b502-8a7595eb9bc7", "value": 94252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759866, "uuid": "6382ef3c-c074-44ce-9f21-998a206a4cf9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63d9e13d-0fe3-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771760473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771760473, "uuid": "edc5f952-7a1f-4ea2-9a79-19dbb909398b", "comment": "Malware payload", "value": "39c9e7aed01089ba429e8a4a7ebe1a9a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771760473, "uuid": "6e9b86e7-dfc4-48c0-8437-c11e7a75d0eb", "comment": "Malware payload", "value": "949ed300bbaf5b988190b4c42594a53fca5babd2dc46fad838b446556a00d889", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771760473, "uuid": "8beaaeb7-8190-4cc3-a122-75f28ec72c7e", "value": "T1A222453B21F08B32D3C410D953A65AA54E72A70B452614B5F4FEA33AAF2C90771E7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771760473, "uuid": "3a1716ea-3c0a-432b-b363-a9660418a3c5", "value": "96:cCu7sht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waHv6Nn9le6AAs9F:cCuC4hvZ5m5FG4j4HKNphvM/6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771760473, "uuid": "1f696968-a2cb-421e-abc1-bbc69c65f4e8", "value": 10461, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771760473, "uuid": "98e448e1-c0aa-4c32-8624-566faff6aac3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17150f8d-0feb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771763780, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771763780, "uuid": "554ed148-93c7-431b-b7e0-40ce6a73d7b1", "comment": "Malware payload (Mirai)", "value": "666fd92b2cfd2b54ff9599ee49a34af4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771763780, "uuid": "182ba50f-d55a-4f44-be4f-64f10c5fca3e", "comment": "Malware payload (Mirai)", "value": "abcf6f2502a1a51f623788c7e16e393a36de5bb8b6df2775dbcaf7d4962017e4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771763780, "uuid": "0abb967c-a63e-476f-b353-2dca40328cfb", "value": "T172D32A45F9414F23C6D112BBFB5E428D372A17A8D2EF72039D256F25378686B0E3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771763780, "uuid": "030cf488-d6d9-4b01-afcb-76aad38fd185", "value": "1536:eW3+JAXM5fh2R4vqujBgF83AxM54VMtb4TjxB9DSxVAOBwWGFytCIv+TljFwywPx:eW3oSw083j4c85B9DgIDGrICp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771763780, "uuid": "4357079a-661f-49ac-a231-775fd347698d", "value": 138016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771763780, "uuid": "1bf84348-cf2e-44b2-8081-b3f2c395afbb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78ab61f7-0fec-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771764373, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764373, "uuid": "bdf4af72-9f93-450e-9d7b-2b4cffb1043b", "comment": "Malware payload (ConnectWise)", "value": "c08bcd5ca1bd89bc53119c53fd7982e1", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764373, "uuid": "2607d5d3-98c5-4211-a34d-ddf5d7f1f6bb", "comment": "Malware payload (ConnectWise)", "value": "5066131363d04d8b7c72e477cf18a53b1cc94f43a78eb943fc43253448be4926", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764373, "uuid": "46bafaa3-9b16-4649-87d3-45120c335a0c", "value": "T10AC6221033F8891CE1B38B3AEC7655A4453ABD59DF62C5AF6268790D2931FC1D8A23", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764373, "uuid": "4d724b35-b96f-45a1-af22-852ec4e28d9a", "value": "196608:0Zs6Uruc9XbMZs6UdZs6UlZs6UlZs6U3Zs6U:0nCtxbMn0nmn8nwn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771764373, "uuid": "ae0674ec-0e17-488f-b692-043d348fc295", "value": 11632640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764373, "uuid": "7a7687f5-1ff2-4874-9ace-dbfa6c00c3f7", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cda90ca-0fec-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771764380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764380, "uuid": "3b155e05-38ab-44cd-a467-0b8fc4919633", "comment": "Malware payload (ConnectWise)", "value": "3ef137ec73c06d34bffc2396a7c95643", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764380, "uuid": "a0150734-9d73-4919-8016-bf04213f9ce5", "comment": "Malware payload (ConnectWise)", "value": "5f7864e2e7c77ddabe9bfab2dec2672256b6fd6eb25ccb3829d76c941f43d892", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764380, "uuid": "481076c1-1442-4bd4-826e-6c28ee432e2e", "value": "T156C6221033F8891CE1B38B3AEC7655A4453ABD59DF62C5AF6264790D2932FC1C8A27", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764380, "uuid": "c95521c5-431c-4152-b6fe-83a2d89b2750", "value": "196608:zZs6Uruc9XbFZs6UkZs6U7Zs6UAZs6UeZs6U:znCtxbFn9nknRndn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771764380, "uuid": "3e8f0e89-d566-4862-a7de-99d4f5c64e16", "value": 11628544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764380, "uuid": "c9394d0f-1abf-4f23-8e7d-7ae7d90f3b73", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99389681-0fec-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771764428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764428, "uuid": "0243e942-7787-4f27-b361-9fe9b73c2978", "comment": "Malware payload (ConnectWise)", "value": "b1ef791ba1db77e9fa8e8e50a8cf02a7", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764428, "uuid": "85376cf3-7103-4652-8e50-9b0858825142", "comment": "Malware payload (ConnectWise)", "value": "77dc5435a2572a8d608e6285da887fd9aa3b16f8a9ea8c0520908990ae44015c", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764428, "uuid": "d72b8114-9857-41d8-804b-e50cfaeb24a5", "value": "T19B836C13B5D18475E8B30D3118B1D9B4993F7E124E648EAB2398427E0F351D1AE3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764428, "uuid": "0592a412-945d-4118-ba3a-e67b65ab31a9", "value": "7631a79a9071099fa4803e1c4c5df207", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764428, "uuid": "462179b0-324c-4e8c-8ca2-76fe37ee668f", "value": "1536:0azWlKzJVcNp++yQNS6xNNCT2l8NE8llbpTaCJRpsWr6cdaQTJSvYYS7QYx6:AFNpo6rIKlUE8fbkqRfbaQlaYYS2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771764428, "uuid": "4f7fae46-8ae9-4c80-97ea-2cac4ead5ae4", "value": 86304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764428, "uuid": "e948729e-798a-4065-9206-8d49334fc2ce", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9940fc83-0fec-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771764428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764428, "uuid": "7306358b-27d1-406e-a168-53842acbae0a", "comment": "Malware payload (ConnectWise)", "value": "b1766075a9efaeae98c32d632aab68bf", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764428, "uuid": "95aa7fd4-f4b5-419a-a38f-d2205ab428dd", "comment": "Malware payload (ConnectWise)", "value": "84f02fc0d878c124a2b324b7ea04ca36265cd87667f7a6af5f39a266068886ed", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764428, "uuid": "a6046c32-db6d-4505-99e4-d978031de29f", "value": "T11C838C03B5D19C71E9721D3524B0C9A15A3FBA111E748EBB239802AE5F341D0AE35F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764428, "uuid": "aba5c314-0401-4fa3-a869-ed75235053f4", "value": "1273eaec87da7c0a308253f29e7857eb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764428, "uuid": "0ec8ffdb-f854-4801-a360-96530fb88e1b", "value": "1536:HXn1JYSnExFkcgKKjxfmqshiKW5Xs/iYQqQJtsWFcdfRMvb+xWvx:XE3x5KBDYiKWm/iSw0fRMvygJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771764428, "uuid": "07ff9ec4-c8f1-4573-853f-67cd88d24208", "value": 86408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764428, "uuid": "5f9e093a-64a2-4670-b432-6684e537d6a3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99427816-0fec-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771764428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764428, "uuid": "b1e56f6e-091a-4a2d-88d9-1afff6cbce5a", "comment": "Malware payload (ConnectWise)", "value": "623c711dfaa8b73bebe3e5b1afbaa0ab", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764428, "uuid": "84ab8e1c-1651-4c49-941f-90c65fa1689c", "comment": "Malware payload (ConnectWise)", "value": "9dca709cad16a9c064c248d3374d32b5c4fe43263e9782e837656659b822c7c7", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764428, "uuid": "be725272-31cd-4f6f-bc25-1acb508e0faf", "value": "T142937B03B5D19C71E9B21E351471C9625A3FBA111E348EBB239802AE5F341D1AE35F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764428, "uuid": "ff2daa28-314e-4d9c-b45c-5657d7bb3bdc", "value": "1273eaec87da7c0a308253f29e7857eb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764428, "uuid": "b53069a0-250c-411f-abbc-7e73bbb15fb7", "value": "1536:nXn1JYSnExFkcgKKjxfmqshiKW5Xs/iYQqQJtsWFcdfRMvb+xWz:3E3x5KBDYiKWm/iSw0fRMvygz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771764428, "uuid": "0d910e00-f425-41b0-8f11-fcf7de2be8e5", "value": 90256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764428, "uuid": "20499570-66f9-439b-a8db-74b8bf0634b8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54dccc1d-0fed-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771764743, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764743, "uuid": "c2a46019-bbb7-41f0-8075-aa53b701fb64", "comment": "Malware payload (Mirai)", "value": "a8f23626df889a51941777e3b31227c5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764743, "uuid": "1c69be93-695b-4310-b1bb-68a384cedb65", "comment": "Malware payload (Mirai)", "value": "9862cd352e14b1542bc46c8d2164ab47ae32cfe003de9b2d531ba8c25fff7e9c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764743, "uuid": "b22227c9-08c7-40ef-966b-e01c5b4f11b8", "value": "T113D3E195F580EB12C7D121BEEA4D4248334317B9E1ED73018E158B7537EB92A0E3BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764743, "uuid": "60c18399-a354-4004-b209-cb45b6c96007", "value": "3072:rponhnSMawQpPwQT45NGcEgTPgwDe1onf/1/PAMqJ10:rUhSjwc8Hlg2Lf9Dey", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771764743, "uuid": "5dd35a5c-04de-4767-a16b-e9b1d2fb0011", "value": 141439, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764743, "uuid": "f47b57cf-5481-42ba-a9c7-0fecedaeb835", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48b9bc96-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765152, "uuid": "251de102-327e-485d-8532-9f26f518f32a", "comment": "Malware payload (ConnectWise)", "value": "9ea764ad9c9cfc106b70bc40325dd24c", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765152, "uuid": "051f7f28-73b2-4738-8d97-956636f4e112", "comment": "Malware payload (ConnectWise)", "value": "df084dd71eaa350ca9ccbea99b34e3989e7be8e150ab0699708443d3e8cced20", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765152, "uuid": "886e10e1-7def-46d9-8ac8-d2ace9ec8403", "value": "T16E647C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765152, "uuid": "a0be60da-267e-4b99-90c3-edc93ebf8ea1", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765152, "uuid": "0f2d3010-e03e-4b34-a696-71fa34a55d46", "value": "6144:tmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9:I1iw7gryNkSV1hy1Z1u2JLu9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765152, "uuid": "119e6f0e-9248-448a-80b3-7dc36800d346", "value": 312616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765152, "uuid": "9b14c2c6-9db9-41d1-bd5d-58a1c7ff4395", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49240dfb-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765152, "uuid": "ae15657f-dd96-4fda-8acf-3d1229b07ea2", "comment": "Malware payload (ConnectWise)", "value": "34c1266aaa124a74e798d2d2f5621fa7", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765152, "uuid": "86f1ef67-b1b6-407c-a40c-211edeb1a308", "comment": "Malware payload (ConnectWise)", "value": "bf5356b04136ddc638a60627c920e0cb5f306696c5703610e81c91c7922bcbbf", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765152, "uuid": "dd4c4783-b50b-4948-aeaf-df2e37c04470", "value": "T106836C43B5D18476E9720E3118B1D9B4593FBE210E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765152, "uuid": "f59db1e3-3818-47a2-803b-bc14b2ed5803", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765152, "uuid": "16d58438-6728-4c4f-aaa8-93e451d74748", "value": "1536:RoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYt7bJD:LenkyfPAwiMq0RqRfbaWZJYYtRD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765152, "uuid": "1713569f-8731-40c3-9f27-b76608540fde", "value": 83216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765152, "uuid": "777e6b9d-586e-4001-80e9-7d2f714bd0b7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4939d5a8-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "56224a31-be02-40cb-a301-d457eb2cae7c", "comment": "Malware payload (ConnectWise)", "value": "06ada33d6014654092315e203affb3ee", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "a24b0eba-5855-4ded-b1d7-029ce51da21b", "comment": "Malware payload (ConnectWise)", "value": "2ce791ef364582442b6c532bdcd66b51a2d4e56f63b176747ae1030dd7806667", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "43375546-6126-4082-90af-1bd7d4648cc6", "value": "T1AE647C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "93572bcd-ebef-4c5c-98b1-f51757d00a33", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "74adce20-de2c-408b-a9be-0c68ae622efd", "value": "6144:tmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9Y:I1iw7gryNkSV1hy1Z1u2JLu9Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765153, "uuid": "a77083f5-57d1-481d-b294-fe1e9f32a3fe", "value": 312616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "254c7d2e-76c7-4fbd-9579-e4a0639482fe", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "494bf4cb-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "737aa835-bdbf-4ade-9e70-16195ab970bd", "comment": "Malware payload (ConnectWise)", "value": "8d88d290b2e64f49c2ec3e58cb895586", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "b5d47af5-88f5-4fb1-bc35-e61395431ec3", "comment": "Malware payload (ConnectWise)", "value": "9afc30c02f2dfdd703c58f5961503f8aabf223f31a54a38d0f47e8317406520c", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "48be76b3-f073-47a7-8a09-7eb322bb31bb", "value": "T1EB836C43B5D18875E9720E3118B1D9B4593FBE110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "cc984851-1e7b-43e0-933b-634d8c2ef38f", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "82c8f9c3-8d30-4a8a-9136-2c6f4eb8c760", "value": "1536:5oG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYJ7vJ:DenkyfPAwiMq0RqRfbaWZJYYJF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765153, "uuid": "cf158447-c265-433f-8c7d-275287f7c72b", "value": 83224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "b6023f85-0c36-4545-ab93-09b3046f06dd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "495a9c9c-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "1450f891-7b27-496d-ac84-8a97bd7fac14", "comment": "Malware payload (ConnectWise)", "value": "824d09d9422fb97eebba6d09ad48fa44", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "8ba6d3ec-3a8f-4791-b6b4-718b02a2cba3", "comment": "Malware payload (ConnectWise)", "value": "9cdb6d21c6454ec617efa681eb0d0aba3afb08b6a04d06adcea81aa6f134aeb7", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "b6650620-5938-4256-bb1b-a734fecfb3e1", "value": "T14A646C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "1cb36e6f-6334-4318-b6d1-a2e6468c1690", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "7cef5407-d302-440f-9abf-f1df8b8b99c1", "value": "6144:6mlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFvi9FP9A6:J1iw7gryNkSV1hy1Z1u2JLa9FP9D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765153, "uuid": "84f653f2-d5f3-4d1c-8e23-edf80b5ed8b9", "value": 312584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "dd865dbe-c918-4fbc-b356-bd2e2cd9bfb7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "496f7389-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "05f6bbd4-7567-46b5-b966-58085f82f4cf", "comment": "Malware payload (ConnectWise)", "value": "f6c931f3013e235426b59ccefbd5be37", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "1f295ccd-34ad-43cb-8fc8-20f85ffb4ddf", "comment": "Malware payload (ConnectWise)", "value": "4b5f281f4c4aae00f1844b58cb88dc06a154bfb839ae1201c9cd23eb6500e6de", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "090b983f-5a3c-437b-99ef-e6aaf12eab7d", "value": "T1E1646C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "f1d70c7d-dd53-4693-b0a0-f3e89630ef2f", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "931f140e-c1f6-49ea-9170-735fa21e3b97", "value": "6144:KmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFvi9uPZ:51iw7gryNkSV1hy1Z1u2JLa9uPZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765153, "uuid": "acb6218f-eccf-4be0-9389-4fd5dd6d0cdd", "value": 312600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "4b6fd5d3-0e59-427d-acee-bef11eaa0dd9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4dfd744c-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765161, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765161, "uuid": "903a567f-c167-43b7-bdbf-341e86df83ed", "comment": "Malware payload (ConnectWise)", "value": "300a7745ca48593c4012a27453c190e7", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765161, "uuid": "5b130952-1a4c-4c56-8d45-1df6bebc3a13", "comment": "Malware payload (ConnectWise)", "value": "9a028b288ecb0a130fa6d3871c316066261b6e093cdacf18597314ec7c6aaa7b", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "80ba8698-2d3c-4f70-b1e1-05c72b3647ab", "value": "T1E6836B43B5D18875E9720E3118B1D9B4593FBE110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "3336f082-2271-4271-adf3-9097d580792e", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "2890686c-a919-48ef-985f-22164061e572", "value": "1536:hoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYa7nJ:benkyfPAwiMq0RqRfbaWZJYYat", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765161, "uuid": "51797eb7-7536-4c4e-92f3-60733699ba5d", "value": 83232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "88946e1c-f507-41e5-b222-124d2ea8305f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e32e002-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765161, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765161, "uuid": "f7025b79-8193-4c3f-924a-f562756f1caf", "comment": "Malware payload (ConnectWise)", "value": "20cb58b3a3961f563bd773cfc6070229", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765161, "uuid": "f0fbb75f-2a15-4a26-b366-ba70b8716d41", "comment": "Malware payload (ConnectWise)", "value": "c968128c35f0e3c0a06883229fa70011e26a9bbde1eaf9761b1d9b677ca90b1d", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "06659bed-54d6-405f-9f0b-cc77c03d1916", "value": "T146836C43B5D18476E9720E3118B1D9B4593FBE110EA48EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "b36e88c0-996b-4d03-91e7-631bb1c207e1", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "af0de66f-beed-4ee4-82ee-070ad8cdcfbb", "value": "1536:RoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYA7XJp:LenkyfPAwiMq0RqRfbaWZJYYAdp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765161, "uuid": "2ff22312-66ae-462d-bd32-1887a53ab4be", "value": 83216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "ae97ea09-ada4-4394-9c1f-1822458dcb10", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e47bd50-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765161, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765161, "uuid": "c0bc5052-59bf-4c98-b51f-48e2bc10a71f", "comment": "Malware payload (ConnectWise)", "value": "ba3d5aed67e41fcdbb46460481dd876d", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765161, "uuid": "7cd727cb-dc44-4810-9aa2-48ce54be131f", "comment": "Malware payload (ConnectWise)", "value": "3330166205f162c4e2e6efec06cc7ee929dfffc0831fbefcb0a8a5361e458ddb", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "b439c177-a4d1-4025-8dd9-d832dfcdd630", "value": "T18B646D11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "1b1ea2bd-3977-4488-8ea2-1913b1f327b4", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "ab92f37e-eb6b-4380-ba34-fdf8f4d0a87e", "value": "6144:imlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFvi9lPl+:h1iw7gryNkSV1hy1Z1u2JLa9lPl+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765161, "uuid": "dccc3f67-0a51-4374-a237-bbd89d830e4e", "value": 312576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "abd711f9-0f53-4f56-82de-728db64ce626", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e497cc4-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765161, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765161, "uuid": "9f192479-70e6-4b43-97c7-d233bfa97f7b", "comment": "Malware payload (ConnectWise)", "value": "b5b00cd69e67d41d30e00741d80a45bd", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765161, "uuid": "589e3c6d-693e-433f-a7ed-0cde1fac98a7", "comment": "Malware payload (ConnectWise)", "value": "7f305e7523e0e51a9b685d323545969630262998dc433e675c7e76a8b0f18ce9", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "106a60c8-6d74-4c4b-b855-f64e2a9172c7", "value": "T1B9836C43B5D18875E9720E3118B1D9B4593FBE110E648EAF7398822E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "13fbc31e-6e9c-4c69-a8c0-dd5a471fc7dc", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "5a24d81a-be1e-478f-8b6a-9a770b4fe99e", "value": "1536:RoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYt7bJy:LenkyfPAwiMq0RqRfbaWZJYYtRy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765161, "uuid": "459dc40f-40b0-4640-9f1c-ad7ef25e184f", "value": 83216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "7c8b8382-07d3-4d83-bf8d-6d93679a0281", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e7df8f2-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765161, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765161, "uuid": "6e1ed7de-d382-40c5-9e63-8b79c821e68d", "comment": "Malware payload (ConnectWise)", "value": "036235ceddda99df51e254e9a365be59", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765161, "uuid": "b6ae37de-c67b-4324-801f-243270b6bbfc", "comment": "Malware payload (ConnectWise)", "value": "c63c71cd99b222247ec33ef3d0a9ee58cd59486e5f0f6bb1dd46a3cf6192fba8", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "ce9cdf1b-efca-410b-9a42-6219c08e1fb6", "value": "T117836C43B5D18875E9720E3118B1D9B4593FBE210E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "70cc0231-6b2a-4814-a92f-f0a29393c274", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "19b92cec-f41b-4387-a52d-5dc6fe4395d9", "value": "1536:5oG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYJ7vJj:DenkyfPAwiMq0RqRfbaWZJYYJFj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765161, "uuid": "6d5e0d43-05b0-44cb-b2f9-d5ea7009b165", "value": 83224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "40350ef4-7875-4706-b72d-498e5489b611", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e7ed370-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765161, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765161, "uuid": "12bd52ca-4572-4c36-976e-42b32abb77fb", "comment": "Malware payload (ConnectWise)", "value": "dd8f404e692058bb22c332eb63582d59", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765161, "uuid": "7858c84a-2842-4c40-9003-a665b8bfbe80", "comment": "Malware payload (ConnectWise)", "value": "65559cb35133e5074fd37ef49c43df3e5e091e6b6c51d680e7eecf11b26ca1a3", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "ac1296e2-ef02-4dd0-aaca-de4694a2aeab", "value": "T1CA836C43B5D18475E9720E3118B1D9B4593FBE210E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "bab0ffb8-0433-4d9f-b64d-71906d6c0229", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "5a4f00c3-7e13-48c5-ac3c-bd1ae1664208", "value": "1536:hoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYn7NJ:benkyfPAwiMq0RqRfbaWZJYYnv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765161, "uuid": "aa415e87-658b-455e-b207-00fd546870ed", "value": 83232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765161, "uuid": "2121a516-099a-4dfa-9180-22a7c2b0b09f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4eb7dbc4-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765162, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "017c15b5-d76f-46bc-9317-8dd95149d700", "comment": "Malware payload (ConnectWise)", "value": "b1a10a07aff2dcf5631506b3578b4b60", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "94b13c73-2346-474b-9cc7-46dc473602fd", "comment": "Malware payload (ConnectWise)", "value": "bb3959ec07e459d2ea13778db416797198ba3ffced1ef0f4d71671e619d5356f", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "17af9573-e9e3-4e61-96eb-07462fb50a35", "value": "T17C646D11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "cbf7d054-5a23-493f-a09d-cac2059eed08", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "5efa9286-ba76-4baf-8060-1ee6685b3195", "value": "6144:9mlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9:41iw7gryNkSV1hy1Z1u2JLu9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765162, "uuid": "596ac0cb-5f6a-4696-8abf-7d6a2db69eb8", "value": 312600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "6be340a2-b8a2-4850-b346-e2e56f281c50", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ebc62e5-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765162, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "e03bc5ce-a58f-4577-a13d-fe2123e4e041", "comment": "Malware payload (ConnectWise)", "value": "79803c66f96db68aad5d974b360dcfc1", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "3220ded3-f084-45b4-92f6-360149121df9", "comment": "Malware payload (ConnectWise)", "value": "e0a21151065ecdc424a1c5826ed7b8f88eb1e08b76dfe5ea47cb3d87a2cf3cd4", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "4eadb2e7-6097-4bd0-97d1-cb3e3b846ba0", "value": "T1D3836C43B5D18875E9720E3118B1D9B4593FBE210E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "55cbd372-2616-417b-ba00-6d86417699ed", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "8a4cdd43-bfdd-4c90-a6e8-8de48f853699", "value": "1536:BoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYg7HJ:7enkyfPAwiMq0RqRfbaWZJYYgN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765162, "uuid": "fbf3f5e6-d700-4e86-82b5-b83de9017bfe", "value": 83200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "cf18e738-cc45-435c-b053-2bb67fc01a61", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ec94aff-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765162, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "30bd48c8-4c38-487b-bfad-5b4b7ee69273", "comment": "Malware payload (ConnectWise)", "value": "50723e9917c87f4416fbb8253ad8861d", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "3412d713-9b20-4c62-848f-cd1aeb8d8920", "comment": "Malware payload (ConnectWise)", "value": "6661ac84fd93b64dc8cdb896ec98d4be98dc1696a7081951b6a8c19c92554ecb", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "790fda1c-57f5-4a3c-bc8f-a20b3d2dabd0", "value": "T1CB646D11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "628d40ee-de75-42d3-ba26-15da3d05ddf7", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "da2953fe-b948-404f-955c-844399dbb0bd", "value": "6144:KmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFvi9uPZ:51iw7gryNkSV1hy1Z1u2JLa9uPZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765162, "uuid": "cae6f9c7-3d50-4ac4-ac53-4529f10ff841", "value": 312600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "4a507100-416c-4208-a433-4d9b5e308a61", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4eca7428-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765162, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "1af84cee-217f-4f5d-8c68-283fbb15d9f2", "comment": "Malware payload (ConnectWise)", "value": "48140d755100b8ef82920a9af19071ea", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "abaa2746-5212-45d8-b390-24dbd50db2f7", "comment": "Malware payload (ConnectWise)", "value": "d356693825b00ad7dbab13c65a8c6a926a6007418f81620003e3baa67ea6b290", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "4656171b-ddb3-4f6f-84e1-d74eb7fc9ebc", "value": "T1E1835B43B5D18875E9720E3118B1D9B4593F7E210EA48EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "a232f543-8345-473b-bd40-d52a7ae638d2", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "5550938b-47d0-4b7b-a98c-1ec581eaf23c", "value": "1536:BoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYb7xJP6:7enkyfPAwiMq0RqRfbaWZJYYbjP6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765162, "uuid": "2e07a290-f831-475a-8c30-5d1fe6baa3e9", "value": 83264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "ceef12d3-beac-4851-8eab-f167625f6f6f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50ce1e5b-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765165, "uuid": "bbf45520-74e0-4c57-b4d3-327ffcf98b21", "comment": "Malware payload (ConnectWise)", "value": "c478b9c3b3144b02b67d1cb5bae24ded", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765165, "uuid": "1305d803-102c-42a2-9c50-6c42db0e917d", "comment": "Malware payload (ConnectWise)", "value": "2068d70eb92b514ba59d6fe4fc9ec10ed8c57c904e64cfaac82578fa0437e575", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765165, "uuid": "c3cb0eb7-ea67-49a3-9e38-11fd7303ef00", "value": "T139646C11B9C48432C273383147B4E2B28DBDB8302D655B8F57A81D7A9F745D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765165, "uuid": "4b58f7ba-fdc7-4859-a33f-c013bb42136b", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765165, "uuid": "52fa07f0-cc52-4b2c-85b8-5b7f4962fdfc", "value": "6144:lmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9:Q1iw7gryNkSV1hy1Z1u2JLu9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765165, "uuid": "ee3eb49a-33b1-4b7f-92b4-f40013273010", "value": 312592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765165, "uuid": "85027090-2a66-4ea1-b381-30a49e88b9af", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50d4d284-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765165, "uuid": "ade7ea62-8f98-4771-8986-ad436a96001a", "comment": "Malware payload (ConnectWise)", "value": "18406e0c45f6ef2c37c831975593e493", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765165, "uuid": "480e2858-c777-4826-982f-0822323676d8", "comment": "Malware payload (ConnectWise)", "value": "2900f1da9c5dadee1f3f4807e8b0ce327142514224b936c69e74569d35e24dce", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765165, "uuid": "a120e10b-c5d3-495c-bfba-a6bf2622f697", "value": "T101646C11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765165, "uuid": "fa7dae79-9566-4356-9ba2-7c48c586cb02", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765165, "uuid": "91741e83-d654-4e6d-b215-ce2c796ad4e7", "value": "6144:VmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9j:g1iw7gryNkSV1hy1Z1u2JLu9j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765165, "uuid": "c3bcd365-e139-427b-a673-a20a5becd552", "value": 312608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765165, "uuid": "7669b488-a883-4c4e-aadb-0c71eb0cdfb9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9bf06ea1-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771765291, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765291, "uuid": "7681e3b3-66a3-406f-a12d-30ebbfa34852", "comment": "Malware payload", "value": "925baae8779911283a0b54eeb8f5de4f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765291, "uuid": "5c53ec93-7519-4dad-bde5-175f06011d8f", "comment": "Malware payload", "value": "af03cc61d8e32a9334723e45eae150e19b2717dae9c80142d87f01caed74ad10", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765291, "uuid": "6f866827-7386-47a1-b256-01a72352c352", "value": "T118935C02B71D0E43D1771DF02A3F27D1D3EEA6E021F4FA88691F9A4591B1E361986E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765291, "uuid": "289fd0dc-375b-4173-9c85-141098bb818c", "value": "1536:R2zOwaHwoTAorA4ivyLlLzLUWxaye4uWAIG/4RjXl+osllEJwmijZ:0zOwaLTNV0oaJ5cg4hlClEEZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765291, "uuid": "130a25fa-2f86-4317-a82b-2c5ee759cb79", "value": 96416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765291, "uuid": "69b5c703-5b3a-4492-9fc7-387bc454a702", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b57b8f2b-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771765334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765334, "uuid": "d4a2b564-36e3-4448-ab29-e96bc1b6e11a", "comment": "Malware payload", "value": "7b9c2f2ef0d3f0f015f473c8748f9efb", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765334, "uuid": "1fa963ba-cc84-4f72-b989-307d1589acae", "comment": "Malware payload", "value": "7ba4cb8331a74564ce94b9fbf4e8b909f20c190222ccf8b915b0410d49b56b4f", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765334, "uuid": "6da1fa95-2396-4731-b083-f0fc6d0df8f0", "value": "T129D6232523FD441AF8F74B79FD3682A46D72BE64CF21C11E9228B90D2A74D4096727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765334, "uuid": "1ec80c5a-0f54-41fe-8f90-493ac978df17", "value": "196608:IWh0cGwqWh0cG6Wh0cGrWh0cG1Wh0cGiWh0cGoWh0cGC:IWackWacjWacIWacqWacXWaczWacn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765334, "uuid": "5692f239-f6af-463d-8e1d-8dbb3158b6f2", "value": 13361152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765334, "uuid": "ed73de93-542d-4ca2-bf8b-7e83423cebed", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b57eae05-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765334, "uuid": "a207c3c2-fef0-4946-ac7a-f006bb1e37ce", "comment": "Malware payload (ConnectWise)", "value": "b707b52e131afc51883e16b450743b4a", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765334, "uuid": "bae636c6-fe6b-4a7e-abf9-1db31f756f63", "comment": "Malware payload (ConnectWise)", "value": "ff9a30ba8db9b4aa630d4fe278b3c2f8059b390367ba9b82189aeaaea99e56b4", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765334, "uuid": "1b870677-f555-4013-9bdd-90174eb5fa96", "value": "T133C6232523FD441AE8F74A79ED3682F45972BE64CF21C11E9328B90D2A74D8096737", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765334, "uuid": "a6ffafc7-873d-4668-ae53-dd12544ea208", "value": "196608:LWh0cGwHWh0cGtWh0cGCWh0cGYWh0cGcWh0cG:LWacpWaccWac5WacZWacPWac", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765334, "uuid": "030cbcf2-45ea-4f64-919f-e84595329371", "value": 11640832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765334, "uuid": "3eeec25c-ddcf-4ccc-a11c-c985d9991c7e", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb7a3735-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765344, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765344, "uuid": "7c2784d0-9d99-4e1c-a53c-8b05f7fbae67", "comment": "Malware payload (ConnectWise)", "value": "4557738fbf2a50a7d03122c407f51e41", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765344, "uuid": "396ad3fd-4770-44a4-8b34-e9fd32b17b84", "comment": "Malware payload (ConnectWise)", "value": "a97103621c482586269be8bf7103b6cfbe56cc1f973547fdf568c8c28c9f2fe9", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765344, "uuid": "82ebdae1-8915-48dd-991d-7ad38c973c47", "value": "T145C6232523FD401AE8F75A79ED3682F45972BE64CF22C11E9328B90D2A74D4096737", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765344, "uuid": "356cf420-df86-4883-9c6f-977b76d900fb", "value": "196608:DWh0cGwbWh0cG1Wh0cGnWh0cG6Wh0cGcWh0cG:DWacxWacwWacwWacfWac3Wac", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765344, "uuid": "96e14f1b-b4c5-4f59-818e-79e7ae822a9c", "value": 11640832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765344, "uuid": "8932ad77-9160-43a8-8f09-9f10553aba11", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce251e3f-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771765376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765376, "uuid": "18904c55-4780-4a94-adc4-2d8d7210e2af", "comment": "Malware payload", "value": "f399ef0fa2709e5773d3ca52cf6a863d", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765376, "uuid": "65518071-88d0-48d0-801a-8fbbedf09633", "comment": "Malware payload", "value": "bab02b42acad8d2cea7c32228b85b98ed1f4bbc2fc70185dd29f88fa2ce707ce", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765376, "uuid": "ea1106af-3cdd-4596-a44f-ac7e72915c29", "value": "T156E6232523FD441AF8F74A79FD3682A45972BE64CE22C11EB22C790D2B74D5086727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765376, "uuid": "3d3a3959-9258-4b01-897b-283499bae38d", "value": "196608:3Wh0cGwdWh0cGrWh0cGKWh0cG/Wh0cGJDWh0cGJQWh0cGJ/:3Wac3WaciWaclWacoWac0WacNWacM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765376, "uuid": "981f5959-203a-4d53-858e-2ddf89ccfc89", "value": 14053376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765376, "uuid": "ca4e5d65-bdc6-4c67-8fb4-1c0588cbbffd", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf1fb782-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765377, "uuid": "95acd36c-d698-4cd0-aab8-af05f47460c4", "comment": "Malware payload (ConnectWise)", "value": "8f8e131d84a8faf470ebf34dc8094e7b", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765377, "uuid": "8c4e3fce-c6bc-4a71-8ea3-77aa8b76c70c", "comment": "Malware payload (ConnectWise)", "value": "515d7da04f9dd0ddaf57367da798b8c1d6a55191a2e5eca505ad644913ca0acb", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765377, "uuid": "101471e4-0506-41ff-92c5-11507bf6bc9c", "value": "T10DC623116BF9D678E0F62A39E8B6A0B0A5367D124D22D12E6334791E2C75EC0C9737", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765377, "uuid": "958bcfc9-de7a-4c80-904c-dec9cbfd3867", "value": "196608:nHxcp9ym3nltDUJVsHxcp9ym37Hxcp9ym35Hxcp9ym3OHxcp9ym3MHxcp9ym3:RGplpnGpFGpLGpcGpqGp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765377, "uuid": "25ad0665-40f5-4d9f-aa32-b658a67c3f2f", "value": 11919360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765377, "uuid": "7c4d4685-01f4-40dd-9116-8d20d9368a98", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3ef7187-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765385, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765385, "uuid": "0641f937-2703-4f2e-99d3-1e295681fbde", "comment": "Malware payload (ConnectWise)", "value": "a442d9fc313f4b18e34e988f6aedd39f", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765385, "uuid": "8f6641a6-3ad4-4eab-886d-46768621ae9e", "comment": "Malware payload (ConnectWise)", "value": "f62777db1bd3c6488dc16353bf54a186502f016c1f711a0772498fd7c39f11b3", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765385, "uuid": "db2ea609-e997-47cd-a3d1-f5b5225648d0", "value": "T192E6236123FD441AE8F74B79FD3682A45972BE54CE21C12E722CB90D2B74D8096727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765385, "uuid": "cd73b328-c009-4154-bc49-f295e6cddf23", "value": "196608:lWh0cGwaWh0cGdWh0cGMWh0cGJWh0cG0EhWh0cG0EiWh0cG0EM:lWacYWacMWacvWacSWacdaWacdLWacdP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765385, "uuid": "67ab28b7-e449-4c55-b86f-52c0904c430a", "value": 14491648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765385, "uuid": "7d99d2fb-17b4-4b94-8a4a-4b99c3b2af35", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6e44818-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771765390, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765390, "uuid": "93249678-d482-4bf5-97c1-5fe31473370c", "comment": "Malware payload", "value": "7ee7c59e3a385a300f1ef72290f74b2c", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765390, "uuid": "b48dffd7-38d8-492c-aaee-866a55d87e09", "comment": "Malware payload", "value": "d535cc81a3e6a96c6d6aceddbe8cbeb4a54de8b5c1a8a3d37945816ba6ae0fbb", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765390, "uuid": "9ac83236-eb46-4bc0-9e16-96dda5d26a60", "value": "T145D6221222FC4126E5F72B3AEA7E85A05539BD709E16C06F57103A0E2A72F80C5B77", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765390, "uuid": "c744826f-a048-4041-a8ad-1d49e397768f", "value": "393216:ZT3dRx9fIT3dST3doT3d0T3drT3dMT3dc:d3dRrw3dC3dQ3d83dX3d03dc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765390, "uuid": "09bf9750-5063-4e7f-9c70-90f835fa7416", "value": 13361152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765390, "uuid": "9fd8d758-62b2-4a64-959e-d8ff008dafe0", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e671b777-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765416, "uuid": "a03d474f-7a25-4205-89b9-0df17768416b", "comment": "Malware payload (ConnectWise)", "value": "03a3b6068ad9ce4f48e1be95cf5be614", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765416, "uuid": "c6be5ed2-9d43-4f16-92a8-31031b832c59", "comment": "Malware payload (ConnectWise)", "value": "62401cef108f9c0250334a1a10406c89dddecb13f66de759a72b1198fafca3ef", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765416, "uuid": "e38b8a39-3f79-419f-8bd3-6034122a85c6", "value": "T123E6236123FD401AF8F74A7CFD7642A9AD72BE58CF61C12F42247A0D2974D8096227", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765416, "uuid": "e6184751-6b59-45ee-88df-182d64330715", "value": "196608:PWh0cGwAWh0cG1Wh0cG0Wh0cGYWh0cGyWh0cGvWh0cG:PWaceWacMWacLWacnWacvWacgWac", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765416, "uuid": "111b1239-6ab9-4972-a3ed-5988b596c3c6", "value": 13996032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765416, "uuid": "ad317bb4-c5c1-4ce5-84d1-67eb8001ec4f", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb7055c5-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765425, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765425, "uuid": "2b20bbf4-c98a-4a34-838c-3c251e91b76d", "comment": "Malware payload (ConnectWise)", "value": "70e24233767e19e5011f7fedc7a60f97", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765425, "uuid": "dbacce78-e175-451d-96e6-fcd6da9ed746", "comment": "Malware payload (ConnectWise)", "value": "9dcd84eea87206e8e21146cd126965fe6ddd8f375d45d9fe761e300f46a1ebaf", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765425, "uuid": "f025f61b-d149-4037-a6aa-439724f50970", "value": "T1E5D62311ABF8A269F0F22A39E977A0B1A1377C525D22D12E1324791E2C75EC0C9737", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765425, "uuid": "ee676776-13bc-480e-9eaf-0614bf101b72", "value": "196608:4Hxcp9ym3nltDUJV9Hxcp9ym3VHxcp9ym3ZHxcp9ym31Hxcp9ym3VHxcp9ym3yH7:GGplp6GpHGprGpnGpHGpAGpA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765425, "uuid": "d0d3b165-58e2-4646-9c00-7f5e2f3aa71e", "value": 13541376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765425, "uuid": "7dd280f1-cb89-44cc-9cca-8239f5cb14bc", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed3da1cb-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765428, "uuid": "7c89f2b4-8c49-4443-9e7c-2860d1bdbffd", "comment": "Malware payload (ConnectWise)", "value": "21aa5a0fb25f15e81edc3a51a3068466", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765428, "uuid": "34b81227-00cf-4dc6-a823-28d9ff2125f2", "comment": "Malware payload (ConnectWise)", "value": "4b021510653d5198a2e46f0fbb49112a5ba3a10a17800fd2a504b1624fa84f90", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765428, "uuid": "38290fb4-92fa-4f37-a0a0-c1b4e9922592", "value": "T1CBD623136BF89665F0B15B78FC3658B4A53A7D059D23E1AF22247D4E2C71A808DA33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765428, "uuid": "d4184e79-5999-445a-8948-05a45ad5806d", "value": "196608:2Hxcp9ym3nltDUJV+Hxcp9ym3QHxcp9ym39Hxcp9ym3QHxcp9ym3UHxcp9ym3zH0:EGplpxGp+GpvGp+GpyGpdGpz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765428, "uuid": "50806ecd-9555-422e-94f6-b89e89eca7bf", "value": 13549568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765428, "uuid": "8152a534-85c2-418c-9f5e-842adcba1dd7", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edd8e841-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771765429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765429, "uuid": "2b118a34-f467-481b-80dc-2065e877147c", "comment": "Malware payload", "value": "18edbb48050a92b251c401444b259c0c", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765429, "uuid": "8eed3d94-c9fc-4e01-96cf-512e2e712135", "comment": "Malware payload", "value": "8d6a74b62521c7bfee0f3ec1aa925549a9fdfa502b4d9e2cb40906d5bee62e88", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765429, "uuid": "dd33f37f-b5c3-4480-afa4-3360ee62619b", "value": "T1CFD6231023F80815F5B35B35ED7A92B1D83A7E65BE22D04E1760F91E2EB1D809E627", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765429, "uuid": "56e23fb1-8f4c-4695-bdfc-276bbefa6af3", "value": "393216:9xIQzck7xIQzSxIQzQxIQzrxIQzLxIQzlxIQzA:rzxzUzKzJzpzjzA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765429, "uuid": "fd686bf7-2f28-4197-ad5e-3211af52feec", "value": 13426688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765429, "uuid": "25d6c982-c910-49c3-a2b4-a0e0ac40e5aa", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc86b4ed-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765453, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765453, "uuid": "3aaee54c-52f3-417f-952c-aebd30c9b9d3", "comment": "Malware payload (ConnectWise)", "value": "778aaf5a8c55fbb8b50ed83d84f8be5a", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765453, "uuid": "07acc1e1-cc0f-4c5f-9b59-3528e268025c", "comment": "Malware payload (ConnectWise)", "value": "d5c7b09bf427a2ff4a10c84121e4e5e2c4b6aee5fb5ce316e15d0f13d4d16d19", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765453, "uuid": "6d37dbae-a098-438d-8da3-438279c638b3", "value": "T15ED6231023F80815F5B35B35ED7A92B1D83A7E65BE22D04E1760F91E2EB1D809E627", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765453, "uuid": "3386510b-c67b-442e-83cc-a64a576465d2", "value": "393216:lxIQzckdxIQzSxIQzQxIQzrxIQzLxIQzwxIQzw:jzjzUzKzJzpzqzw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765453, "uuid": "c5178902-df35-4160-b41b-9765a5462216", "value": 13426688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765453, "uuid": "028dcf4e-1399-49ed-b3f4-f8e9a7debd8b", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03d9a0e8-0fef-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765466, "uuid": "de78bd7c-aa40-4af6-b62c-8e41054b5648", "comment": "Malware payload (ConnectWise)", "value": "6dff95f7135de1ebf09a50b361147276", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765466, "uuid": "5a0a4480-ee51-4440-8d6b-d8af46af69cf", "comment": "Malware payload (ConnectWise)", "value": "1cb9f95bea3f43b7c7fb31e9c7eae165f34dc41f9d53d9a8a52a9f9146dfc587", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765466, "uuid": "b44b95ab-f3c8-47ef-9ee7-5dc15f5f23fb", "value": "T12BD6232523FD441AF8F74A79FD3682E46D72BE64CF21C11E9228B90D2A74D4096727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765466, "uuid": "babc0994-e090-4375-b4ea-8b2f2f7c0c37", "value": "196608:rWh0cGwQWh0cGBWh0cG1Wh0cGbWh0cG/Wh0cG+Wh0cG9:rWacGWac0WacSWacgWacGWachWacE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765466, "uuid": "099aac7d-f905-466e-b8b4-451b2d9fa41d", "value": 13361152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765466, "uuid": "9618b6ae-4eb8-4e4f-959d-e603e9f596ea", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03db7e78-0fef-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765466, "uuid": "7d7ec0fb-0e8d-4ff7-a99d-11e0a9ab9b21", "comment": "Malware payload (ConnectWise)", "value": "ad686121502c7a7e2675be66d5b84f52", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765466, "uuid": "88868aa0-96f5-489c-9745-82540bf50f47", "comment": "Malware payload (ConnectWise)", "value": "8107e67528bfd673c06c86f19cf545c425a0da22ae667d5b0fad689e169a10c0", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765466, "uuid": "45f3b316-2fa5-4332-a7fe-3a020152e9a7", "value": "T117D623116BF8D668F0F62A39E8B6A0B0A5377D125D22D12E6324791E2C75EC0C9737", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765466, "uuid": "2c5287a7-3a56-4036-981b-a81e4e78cc58", "value": "196608:kHxcp9ym3nltDUJVAHxcp9ym37Hxcp9ym3CHxcp9ym3iHxcp9ym3cHxcp9ym3kH0:CGplp/GpFGpQGpwGp6GpCGpb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765466, "uuid": "07751c4c-a69e-4220-b0cd-b787df5c2a98", "value": 13647872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765466, "uuid": "9fc19043-7ee5-42af-8408-f728225952d8", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03e6b024-0fef-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765466, "uuid": "28e0de94-cfd4-4ffe-b918-54e38cb34a92", "comment": "Malware payload (ConnectWise)", "value": "db63829255809d081cf94c97d2943a60", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765466, "uuid": "2706f6d4-6b21-45cf-9982-1be111d23bb8", "comment": "Malware payload (ConnectWise)", "value": "f62d2df8a7507c37dd21b7ba2ef988d16c038296e8902cd6f46214cb65e73898", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765466, "uuid": "c1e47ea1-7036-4986-82b0-8b52dac73fe3", "value": "T142D6231023FC0815F5B25B35ED7A92B1D83A7E65BE22D04E1761F81E2EB1D809E627", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765466, "uuid": "995d7081-1b6b-4320-91b1-c772e61ed7e7", "value": "393216:qxIQzckVxIQzSxIQzQxIQzrxIQzLxIQzhxIQzd:czrzUzKzJzpz/zd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765466, "uuid": "17458d9f-e14f-4ea2-8328-2be2b6023d95", "value": 13426688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765466, "uuid": "255709bc-9a7c-4dbb-8443-fbecf9d1292d", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03f10602-0fef-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765466, "uuid": "f4cc4591-6c5e-4eae-a844-fddcd6f78ec3", "comment": "Malware payload (ConnectWise)", "value": "775290f5114cefe03d5fae4d3c83f752", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765466, "uuid": "4d0acf20-b9e0-4367-a044-0f6ba241fc88", "comment": "Malware payload (ConnectWise)", "value": "689e0bb0afff5493c68bcc6d459643a380bee21b1515cdc5d589dbb8a9f4de82", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765466, "uuid": "4e903d33-40a6-480b-8cde-2569be265bcf", "value": "T101D6232523FD441AF8F74A79FD3682E46D72BE64CF21C11E9228B90D2A74D4096727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765466, "uuid": "57e9988d-7252-42f6-8193-4f9d7658402c", "value": "196608:kWh0cGwqWh0cGBWh0cG7Wh0cGCWh0cGfWh0cGxWh0cGB:kWaccWac0WacsWac5Wac6WacOWaco", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765466, "uuid": "3343854e-704b-4784-a3d7-79257387b8da", "value": 13361152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765466, "uuid": "7441b48e-a7f8-4601-ab19-d6b98c38cb1a", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0824dfbd-0fef-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765473, "uuid": "1624eb9a-c1ac-4a21-bf92-f5a22e31f1c2", "comment": "Malware payload (ConnectWise)", "value": "0fb2b119e01ad5ee3f0898cb941d4b40", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765473, "uuid": "a1ec5bed-c661-4544-8003-596a70b57813", "comment": "Malware payload (ConnectWise)", "value": "19216113fdd182fa6c38f061ef8876657d95eb45236d9eacc4a74d4d18c115ca", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765473, "uuid": "462f85b8-f8d6-47ec-b53e-cfb557b4b3e4", "value": "T1BED6231123F80815F5B35B35ED7A92B1D83A7E65BE22D04E1760F81E2EB1D809E627", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765473, "uuid": "a1b1f418-dc0b-4cea-9339-abbe854cb2b3", "value": "393216:JxIQzckjxIQzSxIQztxIQzVxIQzIxIQzUxIQzV:XzJzUzbzTzyz+zV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765473, "uuid": "9e398552-20e0-45de-9062-29cbfdf30d7a", "value": 13430784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765473, "uuid": "577096f4-787f-4f44-b491-6bffe99aff69", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ce6c4cc-0fef-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765481, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765481, "uuid": "b354db94-4ff5-45b4-bd21-f089b42d3d1b", "comment": "Malware payload (ConnectWise)", "value": "0abf1110c9fe6274f9e0e56168c33efa", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765481, "uuid": "fd83b20f-a139-41f2-a107-e8371c4f87ed", "comment": "Malware payload (ConnectWise)", "value": "9970578d61e6859569f479d920c3d6ee72679861e06e279b73cb3d80d2181ae3", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765481, "uuid": "70ba2f77-3755-4d11-959c-b29ddff2f15e", "value": "T19796233123E9C168F2BA5B39DA3589F159767C51EE23C09F43A43C4E6631E80CA627", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765481, "uuid": "c1551819-7b78-4d6e-b38c-e4d3605c0b1d", "value": "98304:UxzjIs72uGsICdJdwRXVhpC8xzjIs728xzjIs721xzjIs72KxzjIs72:e92yI1V92m92z92w92", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765481, "uuid": "34cd5b5e-012e-4ac5-b5a9-3b0cc9da48ec", "value": 9056256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765481, "uuid": "b77df579-eb7d-4819-9c6d-2fc13cd977f8", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1dcbfe20-0fef-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771765509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765509, "uuid": "ba05dca3-de5f-4482-91e7-b926fbcaec46", "comment": "Malware payload (ConnectWise)", "value": "58062ed9ba178862e6dbc61c76760e78", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765509, "uuid": "738ac554-83bf-4b02-90d2-c59a410d66a3", "comment": "Malware payload (ConnectWise)", "value": "7483d34dde8beabfffdfb43b3d8a4ccc248efc622b54144009bc52d47be01703", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765509, "uuid": "732b1f86-3e60-4cf1-804c-41157af8e063", "value": "T132A623116BF8D278F1F12A39D876A0B1A53A7D119E23D12E2324791E2C75EC0CA637", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765509, "uuid": "0eb49ea5-7b2a-427f-aeb7-9bfb21d8f4e1", "value": "196608:JHxcp9ym3nltDUJVQHxcp9ym3YHxcp9ym39Hxcp9ym3BHxcp9ym3:bGplpPGpmGpvGpzGp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765509, "uuid": "0450f6eb-9f37-4d37-a9d3-82be01c7662b", "value": 9957376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765509, "uuid": "d64566fa-309d-469f-8da9-82ac27d0b3f2", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cfff571-0fef-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771765642, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765642, "uuid": "dccc8347-eeae-4c9b-99b5-9b0d6535b87f", "comment": "Malware payload", "value": "d9559024ff8f16e72c36edc0d12fed1d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765642, "uuid": "6da886c5-2d2d-409a-a822-00db5e0d21d8", "comment": "Malware payload", "value": "3197ab416853afa1cde6920f57a20e63342b7b5f4681f50e38e5dd78eebaf919", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765642, "uuid": "0c0f2256-a563-4d4a-8711-bc248fc1ee81", "value": "T134934D02770D0A43E1671DF03A3F17E1C3AE66E120E4FA496A0EDA4996B1E365947E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765642, "uuid": "a80f25d9-24c6-44bd-8c5c-d91430f6e020", "value": "1536:ljL753I0mneuFTJ+X90rUfqWQGZzP6bl+24u0lJBrBebmQz9T/:N75422oyWhZL24LBrrS/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765642, "uuid": "8945860c-9e63-4ce0-958f-4378127762cf", "value": 96488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765642, "uuid": "747951a1-2036-44ea-9a95-27de4c03cb02", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "887003ba-0fef-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771765688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765688, "uuid": "83bd3e95-6bb0-4ab5-82aa-63dbbc8d816d", "comment": "Malware payload (Mirai)", "value": "a8664aac92b872db2e6ed55474c023e0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765688, "uuid": "9b86d383-4e66-4872-b4a7-cfa10ee72467", "comment": "Malware payload (Mirai)", "value": "9b1a9dda8bf545853af4ae19bf676487a58cec7bbbf87de38a4bac5a8c258305", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765688, "uuid": "66eb91d8-56b4-4a09-af71-28f7ebc6b50d", "value": "T15D93290375C084FCC49AC17407AFA532D863F47E1239B19F27D4EA22BE99E512F6E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765688, "uuid": "1957ae95-2685-49d7-8067-233def1d2f85", "value": "1536:6PnSnKmzFEdYFPxIxNP+dW+fxwX8Raa1C1wBd752nPXaJKDRSsS:6dmBEePxKNPCxwXU1C1wBdYnPXaa8sS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765688, "uuid": "81082102-5396-4994-bf7d-be44e9fbaa66", "value": 93728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765688, "uuid": "32dbb19b-7329-4240-b9ff-78c3cceedf11", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c49d3d4b-0fef-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771765789, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765789, "uuid": "054b9880-80d1-43b6-bdb0-ad7556ff8289", "comment": "Malware payload (Mirai)", "value": "e6bd8f47de9aea402eb262461d247000", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765789, "uuid": "71b127b0-2eed-4aae-bae1-7cb3a7f4fab7", "comment": "Malware payload (Mirai)", "value": "c0da664038588c96533e4cabd3388a4f7045cecfe082e4a736bf7b795825fbd6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765789, "uuid": "e0c64918-e41b-4881-bde4-78e92a7abc93", "value": "T1E3933982BD4F80F5D8174870416BF33FCB32E13A4065D75EEF5AAE26DA3364266163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765789, "uuid": "64cadcbd-d5a7-41e7-80c2-028c0c750b13", "value": "1536:M2+CwDwMt6CP0RMZlfcP6WyK5BeT/w/FYm2qw9M:L+Cw0M0k0RMkjd5BeT/wdS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765789, "uuid": "d0e74e9d-324c-4626-a8df-3de766952a44", "value": 91792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765789, "uuid": "9942fdcc-2e70-4a11-ad09-e6ec0606788f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c57c91a3-0fef-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771765791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765791, "uuid": "6d1132a1-8aec-49c3-9de1-901bb5d1f556", "comment": "Malware payload", "value": "0666c34ddcb3f301e43131d4ae2829b8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765791, "uuid": "2bfe1fc0-ec8b-494a-b60f-4b46862a4a62", "comment": "Malware payload", "value": "fe07cad4823a6cb0971e303dccc710bdd9e6d112252db32dfb25e9ed669aa678", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765791, "uuid": "c528e3a0-cc64-44fc-8229-f3ac4ac96766", "value": "T1C2E32755ED819F05D5D526BAFB5E928933231BBCE3EE7112DE205B2123CA95F0F3A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765791, "uuid": "29bcba62-d354-481a-a389-f056161e12de", "value": "3072:8d0z7aSsJ+NX7euZfa56YIBtDhVJDfx0lfGId9rxVKOiqVQ:NNsoNre0fa5hIBtDhVJTx0lTdVxVKOiB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765791, "uuid": "b4b30acb-ce01-4ada-b5ec-8c9051b5319f", "value": 145244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765791, "uuid": "71836579-e932-4408-860d-963affb12b75", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3930267-0fef-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771765814, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765814, "uuid": "7e8ec7da-e817-443e-a962-b64e8c14a024", "comment": "Malware payload (Mirai)", "value": "cb5bf355f1ecf0f637ef9cc5a6bf16d1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765814, "uuid": "8820285d-5519-447a-b2a0-5ee79b2ec9de", "comment": "Malware payload (Mirai)", "value": "89f0a3d9bb762324ad41a52f1d9a8c1dca8681ef26825c811b193a0de8f4b00a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765814, "uuid": "7aa367af-6537-4a02-be01-dc1e6df70356", "value": "T12CA33996FD824612C6C112B7FB6E028D372717A8D2EE7203DD295F21338795B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765814, "uuid": "3f9cc56d-ab45-4ab2-ab6f-8b2137e8ff30", "value": "1536:vMWrst+KZyiLfKjaAXqsfQtrpjqraQ9zhkzfHxAXhdidkvvoSrK:vM8stRZyi7RD7lpjIaY9kz2xvn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771765814, "uuid": "e39786fd-7afa-4cf5-b24f-0bf5ab680594", "value": 100140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765814, "uuid": "eade98ff-e31c-434c-8e4b-a73e98d46bfc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43702c45-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766002, "uuid": "0eb77fde-f80a-413c-b4a9-d01ce2bb192b", "comment": "Malware payload", "value": "23a0173a38ea91eb3d7640884a3d4e18", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766002, "uuid": "47bb749d-e295-4ea2-8f85-66a004da90ad", "comment": "Malware payload", "value": "247bc7b4c84be6fb0841a5e0007c20b9c8bacdfd2facacb2df0367b6ff83ce14", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "c53f2de9-d8d5-4254-8e49-f456fb4e71a7", "value": "T136E1037435F20C732E611680F23727A5ABB6A45749E3708C35DE2D29EF9BB16A5BF0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "3e93fc97-c754-4dad-9f2c-7438f824e83a", "value": "48:cnRu9R1V6ylwnmu1lwndeP9lwnh+E69lrimE69lrBZLlrMZLlriZLlrXZLlrWZLG:cRuXGmn36fI6fdSITMcckkEE6pb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766002, "uuid": "7a1423ad-dd5c-46ab-bb63-f38f3f2d0938", "value": 6950, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "5114ae15-9d5d-4bbd-9e63-56018f33bf8b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43a858f0-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766002, "uuid": "0fae0ef5-680b-48ac-af52-d1427c157845", "comment": "Malware payload", "value": "5d5e1717cef97a2a9a7255104b5e9f95", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766002, "uuid": "4f4a3289-5aa2-4278-90fc-49fa0d515d1c", "comment": "Malware payload", "value": "7b3485c2b788482bd73165a8f201bf898d000f45e0b4aaf757e6d1c9ac1032af", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "6acb0dce-75d9-4930-9731-be9b32ce9dfb", "value": "T13891B4B420F008332D215540B3771BE6ABB6D85796A3628C34DD1F3A6F9BB03A5AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "5ecd0def-913e-4d79-aa26-a81061fd52ee", "value": "48:cnRu9RJ9nB6gTUblrmTUblr8FUvylriJUbylrEJUbylr+nUbylrMJUbylri0UylQ:cRu7B61xvxhvwJUvU9UXU8wmJjF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766002, "uuid": "468161f9-36b9-4e7b-a16e-e8cc8040a289", "value": 4552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "585d9668-26e3-47de-b3e7-122b082b64ea", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43ab8a77-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766002, "uuid": "03fe2ca3-4dfa-470f-962a-6072fd6ab375", "comment": "Malware payload", "value": "773477cde46d4eb02682140cba194ef9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766002, "uuid": "c6987d38-c97b-4b33-8bdd-914ca2741a25", "comment": "Malware payload", "value": "68ec2c674d57e2bdf4607704f3e1de1b42ec40df1f0d4a4bae923488999cf774", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "ba2971ed-cd97-47c2-8e1e-df0268453b70", "value": "T139315B7025F18A732950AA40F3333B969BB2950345A321CC76DE6E365F96B62A0FF0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "40df71aa-ed22-42ce-a751-b44b77180c26", "value": "48:cniRxuGRys0DdvnSfr7lwnEAJIrlrmwJIrlrs:cWu44kQvIBFIBs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766002, "uuid": "a008c9c5-751f-4e7d-aaba-19602b7b66f9", "value": 1658, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "a6d1c21d-8c66-416d-8b5f-30c4faa7d65f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43b30357-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766002, "uuid": "04193801-d5af-4f39-9683-e85003ed6094", "comment": "Malware payload", "value": "973162adc63ff13a237b79f48b3f0874", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766002, "uuid": "f7d16a5a-0960-44aa-b434-e0a75bcfb6d7", "comment": "Malware payload", "value": "e563153d05e101e3b7258e604e7986a2fad7fa0eaadedf1d27a746af61d30fb3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "00c1788f-078b-4a7e-9cbd-451cd824fe6a", "value": "T18D02E4B025F18D732E24AA80F3372BA69BB6951345E7318C36CD2D265F86B12B0FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "11f215cf-c3bb-4b2b-a606-2adaa7cc62e2", "value": "96:cLuckQdE3bvbxbL+Y9t9y9N9qIBiKIBRIBIIBKIBz6IBWIBMMIllIiHv:cLuLBrFXbnonIIyDFJFUun", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766002, "uuid": "efc4f2d8-8298-4d0a-9813-9c6c44b8876c", "value": 8716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "b108a030-4503-453d-a472-dacfce100fe4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43b6b17b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766002, "uuid": "877872b7-b147-4408-97fe-9e8f30ae5f87", "comment": "Malware payload", "value": "892a9aa71618036b6c29ba655eef4095", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766002, "uuid": "39d56d52-0f6d-427b-8cfe-2f071fb95e65", "comment": "Malware payload", "value": "0a63590f5314fe26184e38c61552e6fecee109f762d74c3ef174a8ce0db5deca", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "3c1acb6b-5a68-4404-bfaa-e7cf81d39403", "value": "T1AA12B57525F208333A706944B3772BA2AB76D95345E3218C35CE2E266F87F02B5AE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "53d90b61-a8b5-421d-b9d2-439fe6031745", "value": "96:cLu/mB6wNEexE+cBhxnCGHoSISogV3uvJv56f9/k:cLu/K6QlHB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766002, "uuid": "c68399b0-e032-411f-adb4-bfadc1629319", "value": 9334, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "89ae4da4-efce-4e37-aa5b-9f1d6b6d094d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43b7473f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766002, "uuid": "6558a6ce-0af6-4a44-8e07-498aea8e1256", "comment": "Malware payload", "value": "aaa695b55d950dccf9a52b1ae4008e44", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766002, "uuid": "69e5feed-49c7-45e9-81ae-e20ba611de05", "comment": "Malware payload", "value": "05f4a3463d07d04808a54828b835f4a173bdaae26cf549f9978f3e3ef2459ee5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "25df499a-45da-4d37-9b32-99886e1907d7", "value": "T11612D37125F14C332A20AA80F3772BA2ABB6D95345E7318C35DE2D265F86F12B1BF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "ba87960a-ccfe-4801-bfc6-e4f20fc4b589", "value": "96:cRu3k0B6DsDzacxwxmkStgFIblbT/+Q9y9U9YIBVIBxIBmIBVIBhIBk:cRu0g6DjUpP//wy2CmJeev", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766002, "uuid": "0f50992d-3acd-4ee6-891d-1416f0b1d160", "value": 9049, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "33b7ea1c-1807-4894-b705-4df514a1ca1e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43b7dced-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766002, "uuid": "c050aec0-d960-4173-b2eb-3257671ba3f9", "comment": "Malware payload", "value": "1335ac15463291ad58b52f1ca5b6f2e8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766002, "uuid": "1be7b8c7-7e63-4f46-ba3b-cc477b700f5a", "comment": "Malware payload", "value": "8206ad9426b1167cd220fc338b917633c681b6c88528380ce5cf02cd847fb878", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "a5ca1de2-42fc-4f28-b2af-364fa02b0b12", "value": "T14132453B21F08B32D7C410C9A3A61B654E72A70B452614B5F4FE6736AF2DA0371E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "de8317f6-a8bb-4659-88e6-645aac4b33ff", "value": "96:cCuosht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waHv6y7OJgaqvlAAprb:cCul4hvZ5m5FG4j4HKNphvW/qdr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766002, "uuid": "0f5447b8-8773-49cd-b700-79cb2e571cf9", "value": 10987, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "04dd87ac-3e6d-45aa-90e0-2ca14e3690c2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43ba1b52-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766002, "uuid": "01a9297d-b915-4406-a634-beba527751e0", "comment": "Malware payload", "value": "42ab57e7d874e3d0d9f5e678d8049ac5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766002, "uuid": "86b45ae0-aad9-4d58-b8b6-ad14fc3168a8", "comment": "Malware payload", "value": "6af09bea2ca0fb68967463ec094f0c0a0e1faeac8772f80e5206b4331d734318", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "14ee1c6d-e25f-4441-be50-85d841a3be45", "value": "T10B12343B21F08732D3C450D953A65A614E72A70B892614B5F4BEA33AAF2C90731E7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "f520c2e3-2cbb-4ff2-8d22-fde97b67c1e1", "value": "96:cCuimB6csht+O+v1fsn+h4+tIiKqCTyOysuKNpUj4waYvjAAArs:cCuiK6p4hvZ5m5FoKNpivHf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766002, "uuid": "c0447f9e-2764-4639-ba31-3b3393d0077b", "value": 9531, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "44829b12-3e0e-4e02-b95f-4123d70113cd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43ba5df1-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766002, "uuid": "aa7f9841-853b-41d3-813d-395a7b62dab4", "comment": "Malware payload", "value": "9c24b6998d37a57d3f490b34e5e7dfa6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766002, "uuid": "54ad5e7f-a6b5-4641-b18f-640dae627982", "comment": "Malware payload", "value": "31ae07eeeafd2a6c1d5158ae22d4fe28c749cf03c85c642a2d3d4fec920008c1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "d0356a10-ee57-442c-8f75-287206d486c8", "value": "T17742773B21F08B32D7C011C9A3661A614FB2A70B456724B4F4FE6725AF2DA0375E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "eaf3942d-f92c-4157-a4b4-d6311567f1b2", "value": "96:cCu7sht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waHv6EDjT2TZIT57dpIJc:cCuC4hvZ5m5FG4j4HKNphvrP6TZITRD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766002, "uuid": "16731f95-2743-4c20-9b5b-066a62eb62c3", "value": 12672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "ffc37665-c067-434a-8bb7-76e035cf7ab9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43da5ded-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766003, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766003, "uuid": "0207186b-a981-40ce-ba9c-8bd427daad08", "comment": "Malware payload", "value": "1d9631a17859a8ebe777196ba98faa9d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766003, "uuid": "09f1c518-8f2c-4e5c-9738-ad260da42310", "comment": "Malware payload", "value": "a8b551fe17b2c17b24e4352790dd5428b28e5165b1589d2c59c9696930c2c5d0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766003, "uuid": "efb7e22d-557b-4ee5-87d3-a75ebf781761", "value": "T1071270B424F04C332E215580B2772BE6ABB6D55395A3758C35DD1F3A6F87B03A1AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766003, "uuid": "d33e7251-6f20-4fbf-9519-a01be08052b1", "value": "96:cRubB6PxbxlxwxlxMQlTUtU9U9UdUdUVUVUgwQwPwNdItV/XT:cRuF6BI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766003, "uuid": "85c6991e-0d21-40af-a148-7f7612ad66e7", "value": 9892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766003, "uuid": "39b0a66d-2c31-4c46-8369-79383819f073", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "465ea8ac-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "c1428d0c-280c-4e49-b4f0-e3c917ecc07b", "comment": "Malware payload", "value": "f27c660fb3e87a0805ed6cb811700fe6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "74baddfe-a516-48e2-8f6e-44e25e96708c", "comment": "Malware payload", "value": "9e679a511c5f6192473cf6e98aebcca39e2878690e309e283f90e7b70c56ff15", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "191f76e5-6f49-44c9-9cf5-af48a520bbca", "value": "T18EF1F17B21F08B31D3C021C9526656654E72A75B996A14B8F4BF933ADF2DA0330E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "f9d1e762-a69a-492e-ba51-1a3da5ad313a", "value": "96:cCu1B657sht+O+v1fsn+h4+tIicqbA/GsGOMbSm3uC:cCuH65C4hvZ5mzjy+M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766007, "uuid": "58d8f7bb-39e6-4b82-9a2a-a570c51ea782", "value": 7841, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "3ae904e7-2159-42ca-a9c9-e55e417d7e91", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4664f24b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "44b40c37-ba3b-4f0f-912d-89f3c97440e8", "comment": "Malware payload", "value": "b14917decb17129a4199c5f53b4c4832", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "d7239e6e-bceb-4d6e-9b4f-d19a31e14634", "comment": "Malware payload", "value": "4a1da07c178dc4c78e26ebfd1f0fb4a427a67370bf7af5c9ce349196f9478882", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "b6f77f5d-cb2a-4a50-a958-70715d3d636a", "value": "T1C232697720F08B329BD021C8A27716655FB2E60B456714B8F4BE1B399F5DA0374EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "8e1e1652-8506-49f1-bee8-867e385398bf", "value": "96:cCu/mB657sht+O+v1fsn+h4+tIicqbA/GsGuTMkCxZIokpIZsMK2vJrpRpcpnX+:cCu/K65C4hvZ5mzjdwkCxZICx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766007, "uuid": "b9787e7a-6147-4f48-ac26-941ff283fb22", "value": 11804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "11eb81fc-40de-49f4-99e2-78bb3f489abb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46681316-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "9e7f99dc-d09c-426d-88ba-e572b980636e", "comment": "Malware payload", "value": "9428dcfd65eefd5a379f9f75dd3f22e0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "58ca0515-43e5-411f-9716-2f71db343d31", "comment": "Malware payload", "value": "ac5997b8e593647af95780e23627db8b52d42b4dbca86576a52b6f04c30c2821", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "a72c7118-f6bd-4bbe-bdc6-234bec0c0e4a", "value": "T19012352B21F08B32D3C460DA53A64A614E72A70F552614B5F4BEA33AAF2C90735D3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "bf1ffdef-3798-4f66-af1a-7fd2677f00f9", "value": "192:cCu+rC6p4hvZ5m5FoKNpivlLVyTYMr9ITB:Jp4hvZ5m5FoKNpivlLsTYMr9ITB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766007, "uuid": "e4528db5-be19-42d6-8963-8ab7e248efcf", "value": 9822, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "425293b9-de07-4518-912b-5778398f1bcf", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "466a7daf-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "6d7f0d0a-371c-4094-b9ce-ab178792fb28", "comment": "Malware payload", "value": "0eab37f15046e579948b12897687cd9f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "442d00aa-28fd-4b88-b289-02b09c53aeb2", "comment": "Malware payload", "value": "41781687cd879f9da43e1ee978902ad4aadb88ff9b751cb356e4db8ef4435f1d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "b62708e7-7d70-4003-b745-3a422e19bcc7", "value": "T1C042463B21F18B32E3D054C862A71B614E72970B456614B9F4BE6736AF2DE0370E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "5cc8ca4d-9633-4d1c-8929-234b8f46b736", "value": "96:cCuimB6msht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waYvjv4xJ5iu+SEgL:cCuiK6L4hvZ5m5FG4j4HKNpivfv8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766007, "uuid": "d13144f3-73f9-4033-8649-f65f4f93a7ce", "value": 12437, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "f9f0f70f-2c64-4220-aa38-ee899806cc39", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "466aaef0-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "78aa2a07-1110-4687-93cd-f1f0db2e5788", "comment": "Malware payload", "value": "92953c480eabdeef7088eeef3efec5bb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "c54f0bfc-c4c4-42db-8844-8b5bc8667428", "comment": "Malware payload", "value": "8e7599983eb09e44cd8144f12332eab82619579ff3f6a416fda20249f672e7ca", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "0400454d-b1f6-4f59-a8bb-70feb33f0382", "value": "T1DE32B47125F14C332A206984B3772BA6ABB6D95385E7318C35DE2E265F86F12B0BF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "14a6835f-2469-4e28-ad7b-e90c3a83ae8e", "value": "96:cCu7B6zJQOlexE+fkxaSN/oSoSogcm6mM+W+pIBBIBwIBVIBAXDDF06G00:cCul6zIFD/7zRiK7yo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766007, "uuid": "ff5d9b6a-3745-4515-a941-50561ab32de6", "value": 11677, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "a3b11fe0-0e48-479c-9f57-6aab4372b54c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "466ae373-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "019d7296-f7d1-4b39-ac09-7e04ccad9b07", "comment": "Malware payload", "value": "cfb99417b55f2820f2ac406e13d64069", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "aaf6d668-57f2-4bd8-ab12-2fe5d27dac44", "comment": "Malware payload", "value": "5d270a6bbff2b324b22fe715500255580174ec5c677bfc268e3d36c5b7a62dc8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "823366cf-e5d5-4e72-aac1-f7fd7e7089da", "value": "T13722A17425F14C332E216980B3772BA6ABB6D85345E3318C35DE2E366F86B12B1AF5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "5f5fe3d6-60fc-483e-bcc9-e7e50b1ec270", "value": "96:cLuQuB6A1FMexuxl+SEgI4Ej87sRWpWZWWW7WvWaIBzIBn6eHI:cLu56AnvLk3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766007, "uuid": "1b603be5-6b85-4a29-8d5c-25ec24dfca3c", "value": 10220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "809baf25-edbe-46cc-a4dd-601c82a3cd84", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "466c1bac-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "434bb308-2c6c-4a45-be91-39a70331bc5c", "comment": "Malware payload", "value": "ee43079e9c9cf66a1af9e2b3a93cb049", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "d0675d4c-2b28-461d-8575-105aced4a208", "comment": "Malware payload", "value": "e8bf3d5969454c8d5b031f9aabc11ac623f7641e8b201d20e3b629fe68915f2b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "3655caf9-ba94-4fc4-9e3b-ee17a2b60d6c", "value": "T1F842683B21F08B3297C461C962A71BA14F72970B456614F8F4FE57269F2DA0371E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "195e8793-2f35-4bc4-8d9d-4a0dc2a21ca1", "value": "96:cCuYmB6csht+O+v1fsn+h4+tIiKqCTyOysuKNpUj4waYvj1XioV7+d+C6IB9IBCY:cCuYK6p4hvZ5m5FoKNpivdVGOyS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766007, "uuid": "c996ae9d-6f98-4067-baac-85c69e19a0f3", "value": 12320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "c6e9fee2-d7ce-4d1e-9440-34529182a15c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46797494-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "8b0504a3-44a7-48ae-a623-33ec87041d3e", "comment": "Malware payload", "value": "d8a052d729bc5ad44e3bfcdc5e3068ff", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "a04f54d2-6212-4c32-9afb-6e1d26c4da9d", "comment": "Malware payload", "value": "8fc1dd646af809409c338487365d6484407b3a3f617ddc1c2e3198c4f5f6e0c0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "9972ec42-a205-46a3-8ba5-6dff55c8db34", "value": "T106828D3621F08B335A9065C4B3772BA54F769607456720A8B4FE1E359F5AB03B0EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "818b03fa-d293-464e-a7d0-1e569067dc76", "value": "192:cCul4hvZ5m5FG4j4HKNphv1KLMW6MN7molZ3:a4hvZ5m5FGGoKNphv1KLMW6MN7mob", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766007, "uuid": "71e6bfcd-22fc-4360-9a29-b28a06c9b6ee", "value": 18579, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "3413c276-0ad5-47e2-b978-d7c34baf8071", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "467ae962-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "b160150b-09db-4cd6-8e2c-843f11c1f520", "comment": "Malware payload", "value": "ef53643a3ada2249b7787d9ebd36c7bf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "f910326c-9177-4aa1-850b-298748ceaa0f", "comment": "Malware payload", "value": "feed9b5bfeca6aac7d6a6bfba370ffacd25c6293ba8053550bb57d3a9c3f3caf", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "928f7eee-3fee-4bd8-84e7-287efad4e679", "value": "T13362153B21F08B32E7D410C9A2671A614EB2A70B856614B9F4FE57359F1DA0371EBF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "84e45b64-938d-4cbc-b4ad-516d0e675bb8", "value": "96:cCuRsht+O+v1fsn+h4+tIiKVC1ymyty6yPyVuKNpUj4waYvjFhGn0VcByNRc81FV:cCuo4hvZ5mu9QFQBKNpivD6Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766007, "uuid": "b87751d7-2873-4ee8-a006-ac657dc62117", "value": 14897, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "b0d872ae-c1ba-426c-be9d-99dd82e48d19", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "467c52bb-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "a6011327-fc49-4f99-b1df-6785d58941ff", "comment": "Malware payload", "value": "2b2657cfb856020b4689469a522190c2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "8e779b16-cd4d-4708-b5ad-f64da04d53e7", "comment": "Malware payload", "value": "9a08b9c950e6db1abab0226b893a75427640b463a49a7d71c4464edcc6bf6596", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "a6d664d9-a0a9-4758-8aef-624c8bae361d", "value": "T1BD42287621F08A3397D025C4A37717A15F72E61B44A714BCF4BE1A3A9F59B0370EBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "c94ee97d-f2a5-41cb-84aa-713b55db1a37", "value": "96:cCu/mB6n7sht+O+v1fsn+h4+tIicqbA/GsGqNz2rJO11IB4IBq5rC2OJyJpJDDAz:cCu/K6nC4hvZ5mzjE+f1mj7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766007, "uuid": "a001fcdb-2d93-4f46-aab8-43f007d9f176", "value": 12706, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "156e4151-bdc4-4280-9b55-3b89072f55c2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "467ee428-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "90f7b903-1e8f-4fe5-a4db-d2d6c7992d84", "comment": "Malware payload", "value": "35361da2020078c5f766cfb9cc0a4b54", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "96b2e1f3-8571-455e-9a53-f73d7f8487ae", "comment": "Malware payload", "value": "bdec7d984271432108939a6364481bc52065ae266ff692169951838c178af10f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "ada07842-1786-4eb6-a608-9e27e5193b83", "value": "T1B03103B035F188332AA06A40F3732B6A7BB2984744E3218C75EE1A355F87B02B5FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "45f136b2-3b03-4e14-867f-4f096db7a7ec", "value": "24:cniRHRURCxO0tbmN2M1sLobHxlc9HHE/XDCol3H/+5oXDCol3HVeN:cniRxuGRys01lwnE/+ol3m5o+ol3s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766007, "uuid": "030db044-e507-4099-b2b1-f0a6484def08", "value": 1508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "1bde5153-02d9-405f-9946-4f6b5900e5a0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46815865-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "69210bf2-61c1-44bb-83d7-88c4fcc37350", "comment": "Malware payload", "value": "a8ff3716b508387f7923dad504ba6989", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "9ed6c5e3-7814-4b04-a0f1-f79b44d00da7", "comment": "Malware payload", "value": "1f58e3dfecb266259ac3ca0845cc435cf0864e214488fb2a98fe8518c5a9d81b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "c1ed61b4-abf3-48b0-919f-a06f523d644b", "value": "T147813C7026F04C736E316644F2772BA5ABB7E8074997718C349E1D396F83B82B5AE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "7c5c82d9-6fac-45c1-bb17-5c7cec9ac990", "value": "48:cnRu9RrXnB6gt+1l3m0o+ol3861E69lriFE69lrENE69lr+9E69lrMLE69lrJ:cRuP3B6/b33m26fP6f56fr6fR6fJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766007, "uuid": "24a9de05-bbe7-40a1-bfc1-49fc7231873e", "value": 3829, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "7a4d5c5a-4eff-4ce4-9310-6a7f2e9b857a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4681b2f6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "bbd09ebb-29e9-46c2-a994-bf082ef5ac46", "comment": "Malware payload", "value": "cee5b30a5f8c6ba449d0473fcc55891b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "bb7dcf62-8a73-46c0-b47d-d630e6107527", "comment": "Malware payload", "value": "d0f735d775d6c9343f77ace7f87e13117ed22fc84441cb2ae294f8d0e9bb3d76", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "68edcd24-88c4-48c4-a16a-5ddbf8ced4a2", "value": "T14831597440F21D63260CA58062B32B857FB3DF534A5213DC35EF5EAA5F8AA03628B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "7f5f08a8-d324-4cd5-b143-c14b8ef305e1", "value": "24:csnRUR8fAR25ob9HHIuCzCRpYdZeZ/iPdFHjeef5uZW5FkXdflUlc9HHUeN:csRu9RHnB6gZ/iPdFHPwWYclwnX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766007, "uuid": "ffb40264-7fdb-4420-885b-062e23530f89", "value": 1616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "bc407f12-9fb2-4722-b30c-9ac0b94f49cb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46837fbf-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "32274823-50aa-442a-996f-41663b99f471", "comment": "Malware payload", "value": "a9e32a5bf06eb9c7f5d93550f760c103", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "268e28eb-9ee3-4c55-b066-ea51be25b618", "comment": "Malware payload", "value": "913b28f279bda19e212d19963bdad35f79cdcc43c6fe7e301a35631a9d84474f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "0aa592e3-427b-4717-a65e-b71af46b9c8b", "value": "T1E122387721F08B3297D021C8A36716A15F72E60B456714B8F4BE1A3A9F1DA0370EBF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "f55bbb9b-856a-4220-9bff-3cb29c4c4938", "value": "96:cCuO7sht+O+v1fsn+h4+tIicqbA/GsGFnI78ORtgjo5C4wEJgEFElG3+:cCuOC4hvZ5mzjG5fd+0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766007, "uuid": "033c0acc-dd16-4678-a245-97a5b878b07c", "value": 10779, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "8225335e-5213-4a2d-9a30-8ba6c74e72e2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46847ec8-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "c63a657c-21a6-4c19-b7a3-e5e15a8468e4", "comment": "Malware payload", "value": "813276c3540a9d1ee272707fdd0f76d3", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "1aa7031d-eb70-4ba0-9f4f-7e0f66f51f7a", "comment": "Malware payload", "value": "33deec1211994c31889c89c9f35e4b5d572c7bfdb885203c20c422fa354b5c7e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "9a1abce2-96f6-4e88-be23-c60cb06b8ac5", "value": "T1A852453721F08B3297D065C4A2771BA14F72960B456720B8F4FE1A269F6DA0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "2d821521-bd47-4d84-99f9-8d89d0ca6dfe", "value": "96:c5uQsht+O+v1fsn+h4+tIiKkC1ymysuKNpUj4waYvj1bUMTQiIBXIBYIB7IBrIB7:c5u94hvZ5mN9oKNpivJVYjwQQIk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766007, "uuid": "e9bce241-c503-4377-9449-f87505ff6b49", "value": 13854, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "de7b1fcd-e346-42fc-83b5-f5c7dc0c08e6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "468a9855-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "98976ba3-6fdc-4ab1-aa39-0608f6edc838", "comment": "Malware payload", "value": "b9d1ebb663ffdfbdf24b91b2843f7854", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "a7a0baa0-6a44-49d2-9f7a-b42e75a110e9", "comment": "Malware payload", "value": "fd48a82ff1f2e7b624c18696fe76c57892b4b4ea58c5082825050c9bf715b22f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "908831d8-d8eb-41b1-8999-147398829e14", "value": "T151914C7025F04C736E201A44F3772BA5ABB7E85749A7618C349E2E396F87B42F4AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "c9aee7d6-2408-43b9-9a96-699851e4d9fb", "value": "96:cRu7B6qi2n6f16fw6f56fbEKEVsEFElcpC:cRul6qMvn++", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766007, "uuid": "114e2a83-dd0e-4eae-b206-e1c2d523c2ed", "value": 4412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "234eb4d2-8086-4a1f-bad3-64e9436751ec", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "468e3bc8-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "3afd3525-6530-44bc-863a-0ea604d59924", "comment": "Malware payload", "value": "edc074855a4923027957714752a1113c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "1907e290-199c-4ff5-87d3-bda3a0803247", "comment": "Malware payload", "value": "257726614c6326fe088f417235e7d8dac1323717473baa5bcda3a777b9743db2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "1ccff51b-7bd6-4a24-9b1d-54570676dc91", "value": "T1E9712E7026F04C736E206544F2372FA5ABB7E8170697618C349E1D396F93F42B5AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "e0cba1d7-bf0c-468f-bdf9-e60ab4d0d99e", "value": "48:csRu9RJ9nB6gSIlrmCKZmDl27lwn880/kE69lripE69lrE/E69lr+rE69lrMRgOL:cCu7B66KZqzs36fT6fN6fB6fspJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766007, "uuid": "22bbaea1-4c5d-4722-8344-3cb430084351", "value": 3806, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "218d04ba-49d8-473b-aeea-06064edbba19", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "468eefac-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "e9b861a7-ec00-4096-afd3-9dfa90e2cad3", "comment": "Malware payload", "value": "bab90e673371da8bfcc8f791b2fee7ed", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "867523d8-38cf-4628-bc33-bce2a68f8bb3", "comment": "Malware payload", "value": "12117b25694ad5e96d5e14c2f55f84549fa0b32b6f3c955faefe4d4cd7167538", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "873e5e1a-c1cc-491f-980b-ae94bbb2e257", "value": "T169D1D77025F00C732E642944F3772BA5ABB7E81749A7318C359E2E296F87B42B5AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "d3eba426-34ff-4592-91d5-5d28fc3193a7", "value": "96:cRu7B64VxT0Bjs/6fZ6fZ6fr6fx6flENE0IEFElp9s:cRul6ACMQ+P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766007, "uuid": "f685f188-6d26-4b7b-9c8e-848ae4812e08", "value": 6496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "79249249-3332-4de8-8d7f-58d748b77b33", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46950fdb-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "f846a386-4c18-4fda-8840-6b3cf8a0eb46", "comment": "Malware payload", "value": "1f782a0eb04c3852316b234703bd8bf0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "7d7005e7-2463-4b37-a123-f1a201bc2343", "comment": "Malware payload", "value": "a148452aa349d84efccab96b21cca5d74c1179ddf990ffff647310df88069d01", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "1914a2ff-59f2-493c-ba47-c33c0d0d73fc", "value": "T194928B7A20F14A33969056E4B3B31B904F739657459321A8F8BD2A365F1DB0374EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "2a491681-2d52-4560-b648-12a618a59bea", "value": "96:cCuisht+O+v1fsn+h4+tIiKkC1ymysuKNpUj4waYvjH8TitVl4JLRTl7RGdEj87b:cCu34hvZ5mN9oKNpivT8GtNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766007, "uuid": "7793f22f-0a1d-4dc2-8981-87934f35c37b", "value": 19374, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766007, "uuid": "d82ccc7a-2176-4f2d-a844-154f1884f624", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4795c193-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766009, "uuid": "f2506457-eeaf-44e6-bf64-e347c0a5d007", "comment": "Malware payload", "value": "f3a4e53cb81be22bf99e9c3552502ce2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766009, "uuid": "d67ecbf5-bb91-455c-b28a-f7d0a4c0479d", "comment": "Malware payload", "value": "211b9a247ea5604328eb6453c45d6164d06ebf33ed06158234e2e915beb15ab5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766009, "uuid": "7952df24-fdbe-4c7f-8573-e090f033512c", "value": "T1C8F1E67025F18C732E24AA40F2372BA5ABB6E91745E7318C35CE2D265F97B41A0FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766009, "uuid": "7709b38f-9763-4f7b-9a46-428f40ff6faa", "value": "96:cLu7B65NGr+QC+wN909VM9tQIBvIB6IBDIB7I5Xp6fX6fi6f46fm6f9:cLul6jYRCv+cnQ4fcQQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766009, "uuid": "924b8814-465a-4779-8eec-d12c7cb69cec", "value": 7989, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766009, "uuid": "f36b31bc-01e9-4f9b-a884-9d5e5bce9de4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47bcedec-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766009, "uuid": "54721476-53a2-4b7c-9413-556b44783b05", "comment": "Malware payload", "value": "07529b3b66be3d8fdf244115d9436d71", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766009, "uuid": "c0a02499-c3de-41af-aa17-2ae1098a7b1e", "comment": "Malware payload", "value": "5600a51e6774980ccd740d3864782436d31decc2171d81ab5d103e458a3f4212", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766009, "uuid": "10d9d304-18c2-4e0c-b688-d6c57dcf3e14", "value": "T13732E7B424F04C332E615A80F27727E59BB2955396D3A68C38DD1F3A1F8AB13A16F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766009, "uuid": "20694abd-0400-4caf-bdb5-622b5b136384", "value": "96:cRurQB6exVx7xxxjxnxtxrx+xfxPxGUOUOUuUuUmUwUyU2UyUeUSU+UiUWUFAU6D:cRurM6+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766009, "uuid": "ea599b6b-601b-4a53-9695-8fce5b666f77", "value": 11978, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766009, "uuid": "30ea5fe7-5452-4a2c-b037-3a5e7ee8b26b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47fbfe18-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766009, "uuid": "c27ed63f-3b64-4fdb-bb30-7212ede7b373", "comment": "Malware payload", "value": "21e229f6b5bebb7c75ad1735813cea07", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766009, "uuid": "02c270da-24ce-4ec1-9d2d-c315e69f3cc7", "comment": "Malware payload", "value": "d4ae4ffec8132298dd27bccca3847690b1900480c92d8ce7a716d26a020f26f4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766009, "uuid": "38a3abd2-0d41-4c8e-afbe-8a43f303b4a9", "value": "T1ACD1C47125F14C333E606980B3772BA6ABB6D95345E3218C35DE2E366F86F12B1AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766009, "uuid": "615f6b83-6481-4d20-8cf5-5e8e0269af8d", "value": "96:cLu7B69xiUSUOSCx2xkStgFIrOIB6IBOs:cLul6CUCha", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766009, "uuid": "5c366eca-f406-4a22-9b84-5c63c4a28437", "value": 6289, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766009, "uuid": "2f27b190-8c00-4d12-bbc9-5a7754eb9c1f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "493ee6f1-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766012, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766012, "uuid": "87399d16-bf17-4130-a5bb-2ab2635629d1", "comment": "Malware payload", "value": "443aa89548bd8df4562d00a17de7b449", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766012, "uuid": "da7df4b0-2bfb-4bf2-9e48-bc5f4f2fccbb", "comment": "Malware payload", "value": "ab066ca96447008e227ac2c7fc7637821fbdcc0ac4db30124dbd9eebdd1d1acd", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766012, "uuid": "c396578c-b15b-42bb-b11e-569f4f6d215c", "value": "T1F312362B21F08731D3C460DA52A65A614E72AB1F892514F5F4BFA32A9F2C90735D3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766012, "uuid": "50e28c0f-276c-4817-81e5-051b38e3f63c", "value": "96:cCu8io5B6csht+O+v1fsn+h4+tIiKqCTyOysuKNpUj4waYvjQ:cCu8v6p4hvZ5m5FoKNpivM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766012, "uuid": "4e92ea60-eb48-44d1-bced-1f0d3c6d20ac", "value": 9465, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766012, "uuid": "75394ffa-ead5-4835-afef-f7d3505b2767", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49d1df01-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766013, "uuid": "8875cbe9-6648-4685-a988-6952b2c23b6e", "comment": "Malware payload", "value": "8ebfad7a1df4d9f1b242d2c32695c29d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766013, "uuid": "006c7d73-9930-47c8-9c01-2d161a71cad9", "comment": "Malware payload", "value": "d0cf1c9d099df3eadd520574b1721f8a01dcaf18afa31705e3b81d0eb13877a2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766013, "uuid": "4319918e-661c-4f00-a579-f13862ca2ecb", "value": "T1A312572B21F08732D3C420CA53A64A614E71A70B592608B5F4BF933AAF2D90735E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766013, "uuid": "a75c2354-b99f-46dd-8380-b865174ce659", "value": "96:cCuAmB657sht+O+v1fsn+h4+tIicqbA/GsGCuKNppjrwam0T/s7Fs:cCuAK65C4hvZ5mzjqKNpdT3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766013, "uuid": "6c77f0e9-dd09-4325-a434-0d9a08e62c15", "value": 9539, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766013, "uuid": "61268f4f-3b7c-4d07-983d-76f81bc81a99", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a6414f3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766013, "uuid": "3ab6f249-8be9-4f33-9a2c-9b2b8c5285b4", "comment": "Malware payload", "value": "14ba8962bd51716c4f5d43d9e35a9289", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766013, "uuid": "b452b59c-5cd4-42bf-a8a9-0e2e4d1f68ca", "comment": "Malware payload", "value": "ad5c4928b38f87a07bdf6a44e46097304baef57c1ff2982ac2293a7bb9746eb1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766013, "uuid": "40dfaeae-b6db-4c48-9048-388fae824c31", "value": "T1A051757024F04C332E656580F3372BA6ABB7E95349E3618C35DE1E396F87B02A5AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766013, "uuid": "bc2c9f0b-baf3-4aaa-8434-9f226773b1fd", "value": "48:cnRu9RVnB6gwUblrk+3l/BZlClrMZlClriZlClrXZlClrWZlClrRn:cRutB6oxTaxHoDF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766013, "uuid": "a3df0b60-787e-4748-a8f5-c6338a00fe09", "value": 2804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766013, "uuid": "edc1e38e-3691-4930-b87b-435c7165e37b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4eda0a5c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766021, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766021, "uuid": "cd8601ce-2c37-4d04-a0fb-d1fa1d4d088d", "comment": "Malware payload", "value": "903d5d8e42db6d120f6402df0268a844", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766021, "uuid": "93bb8c7b-1f4d-4c84-ae3d-6ad93a849596", "comment": "Malware payload", "value": "8e029b5718213f372c2e8034eb0c0ef1557beb894cd1d777c011bbde762b5a5e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766021, "uuid": "f1b31dbd-5b4a-4614-b4e8-0e66ff9e139c", "value": "T19282AC3621F08B339B9055C4B3772BA54F769617456720B8F4FE1A259F5AB03B0EB7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766021, "uuid": "95265b1f-afea-442f-9f78-a419d161a1e9", "value": "192:cCuA6p4hvZ5m5FG4j4HKNphvn/TONVLxo8vhM3xL+F:Mp4hvZ5m5FGGoKNphvn/TONVLxo2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766021, "uuid": "0c60c18e-2713-4082-8bec-bd00ee157698", "value": 18075, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766021, "uuid": "d9053af5-cb11-4298-b8c2-a46e6985fb9f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4eec7bbe-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766021, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766021, "uuid": "ae86bf7d-8a23-496a-b090-27712c3ba1fc", "comment": "Malware payload", "value": "40e512f5cb03a8dc68af9dda7ac95864", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766021, "uuid": "f1df1873-2a4e-4183-80f3-aeead91e8214", "comment": "Malware payload", "value": "6cc74857546bdaf04cc1e6341d0a942f2634236a6115df3b4494c004ebcd2831", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766021, "uuid": "c28318ed-4cf5-45c2-ad14-4c5a36b4ad50", "value": "T18132D67025F18D732E25AA80B3372BA69BB6D95345E3318C35DD2E265F87B12A0FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766021, "uuid": "0c457440-dc71-4abf-b1df-db48eb2b39de", "value": "96:cCu3k0B6VzYMPZo8zS+6+x+s6IBqHIBZIBcIBSIBrIB4IBNIBrIBFRDfBVZUdR1p:cCu0g6VjZYBe4Tm/9g/C4Q1o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766021, "uuid": "57d1d754-73df-4dd1-9315-a03c682777fa", "value": 11492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766021, "uuid": "f5b7c8ca-7a6f-47b3-9da0-686325cd7f9c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50bd8cdd-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766024, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766024, "uuid": "5501bb3b-8597-42f0-b7af-af250faecbc2", "comment": "Malware payload", "value": "0415de3ee8bd9feddea45242ee5a7f14", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766024, "uuid": "f60dafd4-1490-459b-89df-fc798cd494a6", "comment": "Malware payload", "value": "7787679b1b37b82edd17109eeb2b80493d145e1e2ab5e70a30f4f3099a19e052", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766024, "uuid": "27f29f0c-b36b-4de1-95cd-026cd3a1a360", "value": "T11922A3B424F10C332E215980F3772BA5ABB6D85345E3758C34DE1E396F8AB12B5AF5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766024, "uuid": "004e3a7d-11a6-4efa-95c0-a130cb15db68", "value": "96:cRuyB6PxExSx8xlxUxlhxWxxQy87ssUE/7WvW7W3WbWY7ER:cRuG6i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766024, "uuid": "661c4c2d-da49-4555-8a19-d543deddffac", "value": 10406, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766024, "uuid": "0fd4f8da-e421-4fcd-a7fd-74c30abccf4f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51429fee-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766025, "uuid": "c4257fd7-087d-4f62-95c8-03e41476e23b", "comment": "Malware payload", "value": "99c13ec1374a93f8045635bd8a247203", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766025, "uuid": "a6c2abd9-743a-48a8-a71e-5c59bd148f70", "comment": "Malware payload", "value": "4c7e928c6b433f2ad7adf7c94c164be2ce2947aa8375fca3fb5be8b2d1e35adf", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766025, "uuid": "9cbde328-261e-4160-a64c-6ecd7ec5dd3a", "value": "T1465126B430F14C732E256580F37727A56B73A85305A3728C34DD1E396F8AB02A5BF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766025, "uuid": "4308ed98-3c10-44ca-8ba8-b90dc8c803af", "value": "48:cniRxu60DkLlwnIwG9lryrIpklrAZF/7lwnGCmp7lwnIOR6Llrb:cWu54K7GKYhb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766025, "uuid": "b755dca5-150b-4a34-b769-9df3735153fd", "value": 2487, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766025, "uuid": "66dca6ea-09e5-403c-bb94-6d3677430808", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52ef8be2-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766028, "uuid": "322e3bdc-085c-45b6-a5d1-e627bda97530", "comment": "Malware payload", "value": "7d75833369a8b4ce9fff122a91aab71b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766028, "uuid": "7f3ce25a-8d63-45b8-95bb-9851919a5f9c", "comment": "Malware payload", "value": "173952fede5f8c317c479ce9217f64c4ba92a815ba015022634843d53346f97c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766028, "uuid": "43503c67-da9a-42d9-a04a-4e0b4bc3dd21", "value": "T1B3C1D87024F14D732E25A680B3372BA6ABB6D95345A3318C35DE2D266F87B12B1BF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766028, "uuid": "b2285623-7678-4a74-9327-6075a37401b3", "value": "96:cRuek0B6oNseNuN7IWHHvIBlIBtIB4IBL+s:cRutg6vW6TW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766028, "uuid": "5409a904-0af2-4340-aa9a-680f65970183", "value": 6084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766028, "uuid": "18645a71-19bc-4792-942d-210f4c2face7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5307399f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766028, "uuid": "dbc724b9-f7ed-471f-ae5e-cfbd89507a14", "comment": "Malware payload", "value": "f369fa8ca094ef131fe9d2bbd344023d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766028, "uuid": "c7edc999-df25-4206-a16a-206c3ec30ec2", "comment": "Malware payload", "value": "dda2ab64783beae5cfdb2f3dd22726a550df1a97eec25c285a53b64a61f543c6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766028, "uuid": "f08fa85b-8672-4a3e-8f3a-457bd608ce3b", "value": "T16F22463B11F08B32D3C460D952A61A614E72AB1B852614F5F4FEA32AAF2C90735D7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766028, "uuid": "8e09b729-9e50-4e4d-97a6-3f264ac6f660", "value": "96:cCuYmB6csht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waYvjcMioV3s:cCuYK6p4hvZ5m5FG4j4HKNpivdi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766028, "uuid": "d41714cb-8aaa-45ba-b472-65fee024e33e", "value": 10420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766028, "uuid": "41fe98d5-4a27-4d96-a9eb-9087e0ab28f1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53226ace-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766028, "uuid": "81012a08-efa0-40e5-8847-9d227a4df08c", "comment": "Malware payload", "value": "60f507b5c134034158f1da893a24271b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766028, "uuid": "830ce083-2831-4ca5-af5a-e79ad92e61dd", "comment": "Malware payload", "value": "10a216ebe4844c23f619757d471adb83b6e48c0cd4006503734a97b1fabedc85", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766028, "uuid": "3d9f747e-bd05-4dfb-8461-f296fc89b510", "value": "T15882AD7221F04A339B9015C4B3771BA54F77961B456720B8F4BE2B359F5AB03B0EBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766028, "uuid": "b1901584-50af-41aa-b2ba-813ad87b3c52", "value": "192:cCuiZ6p4hvZ5m5FG4j4HKNpiv9vAMVxt+W:+p4hvZ5m5FGGoKNpivT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766028, "uuid": "e87cb963-3e1f-4518-9b4e-7f205d7bf9e5", "value": 18743, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766028, "uuid": "ad45edc9-7513-45fe-9c20-e9d5c028cac3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5322b864-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766028, "uuid": "3f05b02b-1e9f-4407-964c-d01f6394ba67", "comment": "Malware payload", "value": "ec5e7dec92f5d8a51f6dd2157e49999f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766028, "uuid": "d33bba62-9988-498d-a9ba-6d4ca74d5bce", "comment": "Malware payload", "value": "99232e0223c71c2eef20bfa4a0709201f25d4ed58d083f23e77b719b76172205", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766028, "uuid": "912a0139-c71d-4997-9971-898d372bf4d3", "value": "T1C532663B11F08B32D3C460D952A65A610E72AB0B452614F5F4FEA72AAF2C90335E7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766028, "uuid": "0edd475c-d7d4-4e5f-b5a3-871c50700f83", "value": "96:cCu4B6csht+O+v1fsn+h4+tIiKqC1yOysuKNpUj4waYvjHUVTuzXlITPioVRJAs:cCuk6p4hvZ5mrFoKNpivbUVazXlITPVP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766028, "uuid": "19849292-0646-48c1-8369-e1835225f537", "value": 11052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766028, "uuid": "1a84d49f-adf6-47c1-b3ef-1013ce2b095f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53236d00-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766028, "uuid": "ac3e18f0-dcfc-4ac9-8b08-a05e59845767", "comment": "Malware payload", "value": "fad59741f6b41ec85accc813aca27164", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766028, "uuid": "2ce14cae-e881-40c0-95b8-68778992e262", "comment": "Malware payload", "value": "2cfa102b049968a1d9be003095ac74432f491975b1f7af8b57d690003289e2b6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766028, "uuid": "dbcd4106-ac3c-4a90-9ac3-96b375164f91", "value": "T10D315B7441F11D63260C644062B31B857F73DF53865213DC35DF5FAA5F8AA03628B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766028, "uuid": "e4b7745b-6b32-422c-ae47-b318d95fa673", "value": "24:csnRUR8fAR25ha9HHIuCzCRpYdZeFc/iPdFHjeef5uZW5FkXdflU1Dlc9HHUeN:csRu9RHnB6gFc/iPdFHPwWYcdlwnX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766028, "uuid": "3de439e3-656e-4888-bdfb-1130038dea8b", "value": 1617, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766028, "uuid": "3eeb733f-16e4-4271-9dd7-f18b276b1bd2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "538cdf72-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766029, "uuid": "668adfde-d41d-46a9-8473-fe231833409b", "comment": "Malware payload", "value": "319fe1beda51b20ea533b9c32a2cc415", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766029, "uuid": "4524ced2-b5b0-41a7-88ef-13270073be78", "comment": "Malware payload", "value": "7548ace2f486fa6b9ac9d36c0e795a0b068ae28c540a996b47a35901483c8ea0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766029, "uuid": "54b611d0-aaf7-4e62-afbe-1800d43794f2", "value": "T156216D3880F21D63260CB55025B31B807F73DF579A5213EC35EF9B9A5B89A0322478", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766029, "uuid": "666116ec-8468-4700-ba63-5aa8b8893cb1", "value": "24:chnRUR8fARW5WiPdFHjeef5uZW5FkXdflX9HHIuCzCRpYdZ1eN:chRu9R/iPdFHPwWYlnB6K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766029, "uuid": "b608d8a2-c538-442a-bc87-025f73c75dec", "value": 1259, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766029, "uuid": "22c4c681-c985-450d-9252-577fa6b6f1e0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53999c0b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766029, "uuid": "c0f21e3a-4c74-4c91-834a-313664af57fd", "comment": "Malware payload", "value": "2c67fda26f07925bc8a4a0bfbeeb234f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766029, "uuid": "dde9d193-6768-44d5-8b94-70b271725bea", "comment": "Malware payload", "value": "38ace0b4e62a23fc66d0e80746c0e5b4e6890693d92bb39d57186691b8b11eb4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766029, "uuid": "e4d37a1c-f68c-4d49-a71a-31fb8ad1c287", "value": "T132626B3721F08B3397D065C4A2771BA14F729607456720B8F4FE1A269F6DA0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766029, "uuid": "689cb015-eb66-4517-b6b8-c8d9e2b5738b", "value": "96:cCuRsht+O+v1fsn+h4+tIiKVC1ymyPuKNpUj4waYvjtVnkQFn+3+ZIBhIBrIBIIe:cCuo4hvZ5mu9bKNpivLkEEq2sPiEaGI2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766029, "uuid": "6042814d-f7cf-4dba-a0ac-10c6b0dc9d80", "value": 14923, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766029, "uuid": "00fde863-d081-467a-a688-b7279207584e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "540ec588-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766030, "uuid": "f67a0075-48d9-4e46-9554-2478df18739a", "comment": "Malware payload", "value": "f62ab214bcbdf974cc079faa10bada17", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766030, "uuid": "6b48052f-d8fe-4b14-8283-5b2cee5b544c", "comment": "Malware payload", "value": "3af831e0b4875278ade73b8c5f1583776982fa1d89aed8c10ddef7819024c45e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766030, "uuid": "88229ce0-cd65-4090-8bf7-6e16060ba95c", "value": "T13F42453721F08B3297C065C4A2771B614FB2A70B456714B8F4FE5A269F2DA0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766030, "uuid": "b41944e6-9d1c-4bd2-8505-b198ea78f9b6", "value": "96:cCu2k0B6n7sht+O+v1fsn+h4+tIicqbA/GsGCuKNppjrwa3v+LIBJIBSIB/IBhIO:cCuFg6nC4hvZ5mzjqKNp1Y25cOT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766030, "uuid": "9dbcff03-b423-4120-bfea-f40fd586c384", "value": 12328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766030, "uuid": "4ec8619c-3c90-4858-bb09-4c1c527936c8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54ce3935-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766031, "uuid": "c2548469-4452-413d-a4e3-4dc8fdb090b3", "comment": "Malware payload", "value": "7baf2a4bd584b48f8962688bc36ec713", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766031, "uuid": "2b3c9b6e-f9b2-48bd-b9fe-529e11d3ab05", "comment": "Malware payload", "value": "9b5f472ba3f15b3da83739480dadd2292263b2ef966c929091f44e367db73533", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766031, "uuid": "55861e8a-af98-4adb-93e8-c021b97a469c", "value": "T1F8A27E7621F04933AA9055C4B3772BA14F72D65784A321B8B4FE1B359F59B03B0FBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766031, "uuid": "70792ff9-e948-4b0a-9ed4-9213c5733857", "value": "192:cCu2g6p4hvZ5m5FoKNpivFDFCrxIT+10DUwoKmjLaeOWO+8TRi1:Bbp4hvZ5m5FoKNpivFDQrxIT+10DUP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766031, "uuid": "5aa069a0-2cd5-4ca6-b3ed-bfdc363cfba3", "value": 21423, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766031, "uuid": "ef9f0898-2453-4391-9ec9-028cda230a4b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54fdfaf3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766031, "uuid": "c73e7167-bfd9-43d8-bb0b-1a386eab5a33", "comment": "Malware payload", "value": "02787ba58747de945b875d262b157334", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766031, "uuid": "6758afda-050c-429b-98a6-b1b6dff627f1", "comment": "Malware payload", "value": "073b3cda4f9e45892f6d94f1bd8c1c5c3295abbeb557e5c2e1c516f64c8f7438", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766031, "uuid": "4df6394e-a574-4458-acce-cd00235a7989", "value": "T1BF327B3B21F08B32D3D410D953661AA54F72A70B492614B5F4BFA339AF2DA0374E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766031, "uuid": "f112ad9e-f1f9-4acc-91b4-d10c32d9c110", "value": "96:c5ujB6msht+O+v1fsn+h4+tIiKkC1ymysuKNpUj4waYvj4Q6fm6fC6fpAAb:c5u96L4hvZ5mN9oKNpivcJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766031, "uuid": "12623442-27a6-4091-9582-ed42e8fa9c1c", "value": 11184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766031, "uuid": "67b47aa5-f723-41a8-9d2d-a8a349686095", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "550c3137-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766031, "uuid": "418cba65-0f5b-4a98-88b0-77f28a8a3f0b", "comment": "Malware payload", "value": "bb248828fd73a606323b64158bdadd83", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766031, "uuid": "600375a4-9272-46cb-bcaf-d57d36053e50", "comment": "Malware payload", "value": "0c707152ed75da5c509646adeb522166e6812019e4b65cd3146cd7005369c89b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766031, "uuid": "8ce242f5-b813-49e8-9ea6-bf222f3bdf4d", "value": "T17B12353B21F08732D3C450D953A65A614E72A70B892614B5F4BEA33AAF2C90731E3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766031, "uuid": "8e8179c5-d997-4c23-b56c-4cbe7b19057d", "value": "96:c5uTmB6msht+O+v1fsn+h4+tIiKkC1ymysuKNpUj4waYvjWUArs:c5uTK6L4hvZ5mN9oKNpivlf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766031, "uuid": "986d3188-2caa-4e98-a85f-b1fd37f86c9c", "value": 9649, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766031, "uuid": "cddfc39e-c7d2-4091-91df-64280a9b8afb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "552c2ae7-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766032, "uuid": "415c4be4-a8ce-4218-bc7b-4a6983be52da", "comment": "Malware payload", "value": "44f09532523c28f4e795d8daf1f5512f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766032, "uuid": "62105574-3613-4f52-afe5-4739b113889a", "comment": "Malware payload", "value": "84c6cf527dcb09ce579656606dfa979a6783886e92600eb57fc0e265f407be15", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766032, "uuid": "c6985d7f-26fe-474f-8748-729fa9eb8f04", "value": "T1F3113A7411F10C2326146690B2376F557F72EC4749A352CD38EF5A396F97F03A29B0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766032, "uuid": "8fdaa4e1-16d4-4a04-9e0a-5c14b743124b", "value": "24:cnnRUR8fARW5wt9HHIuCzCRpYdZe63NmUKLUlc9HHUeN:cnRu9RLXnB6g63NtlwnX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766032, "uuid": "74e73d28-eba8-480b-a771-f1f7b81a2dc2", "value": 1054, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766032, "uuid": "085962d7-6bef-4a57-931b-08d0f6c7405e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55313600-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766032, "uuid": "1aa23cc3-204a-4868-9fe9-e3af4574082f", "comment": "Malware payload", "value": "3f5f207f1a673423c5b20395ec2e6f10", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766032, "uuid": "00f04d4b-b1f9-4527-a339-f35eabe8b63d", "comment": "Malware payload", "value": "06da57a6d7da2c70c3a718a3f1dde712a1512ae12c2e7deedbd175cb7eea09f4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766032, "uuid": "9b3b672a-7215-4acb-b726-b08fbc384317", "value": "T13241277015F048732A216644B3372BA5AB77EC474A93628C38DE2E396F93B42A1AF0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766032, "uuid": "2472772f-f4fb-4757-bf0c-e548283f98f8", "value": "48:chRu9Rp9nB6geSqylrm/SE69lr8JU/EFl/F:cLu7B6eqwgJ6fxIF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766032, "uuid": "3ac7559d-7fab-4075-89e5-aacfb6d1b53d", "value": 1911, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766032, "uuid": "4112cc7d-5154-48aa-bf89-b4cf38053fe5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5541c757-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766032, "uuid": "8ecfbe0c-e54e-47ca-86c4-c40e4fc3172f", "comment": "Malware payload", "value": "73bb3e7a743c7af2f2458a1c6750b862", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766032, "uuid": "7bb9e3f4-45ac-4a8a-be95-90d27247ce24", "comment": "Malware payload", "value": "85d6bb6d5d7299c6db0878cbe9ade7e5acd061916f63278d1fb6a9d80875621f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766032, "uuid": "58c7d075-a807-4317-b9a8-0e8ee61105ad", "value": "T106F1C02B11F08B71D3C421D952A656954E72A75B992A08F8F4BF973ADB2C90334E3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766032, "uuid": "836f59dc-5275-48e6-882f-53449df6762d", "value": "96:cCuaB657sht+O+v1fsn+h4+tIicqbA/GsGsioVbes:cCue65C4hvZ5mzjBz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766032, "uuid": "2a7cf3dc-0119-44d2-bb1d-5c265a031fa8", "value": 7656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766032, "uuid": "44ca3d04-06a8-462a-bf33-c2b5c5ea5b2d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5550896e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766032, "uuid": "ccc68b34-2581-4939-b75a-37b791f83fdc", "comment": "Malware payload", "value": "bdf5ad83225d479331662cc92855b27c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766032, "uuid": "4faa9d3a-61b0-44d2-9b5c-d5d608dc0a25", "comment": "Malware payload", "value": "a5252a163fea8491fe35b9c9578a677100615419c099b5bad8568bdce50364be", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766032, "uuid": "d99537b1-0227-4ced-b715-c1a32b2fc040", "value": "T17CE1277025F14C732E216644F3372BA5ABBBE8570597218C39DE2E256F87B42F4AF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766032, "uuid": "e3036fe7-ec8c-4717-a3f8-4f2e414e578b", "value": "96:cLu7B6vlgxITYEYdG0j6fK6f76fh6fwb6fiJ49XX:cLul6gwIe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766032, "uuid": "9be59a1d-6bde-4039-bfba-39b8a001ad37", "value": 7365, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766032, "uuid": "7d6d0e7f-77c1-48d2-83fb-105e6f799b3d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "565cbf28-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766034, "uuid": "ac61a56d-1d79-4a83-bf86-7302aa8110cd", "comment": "Malware payload", "value": "9ab22d58efadbc2951d0b188a914c5dc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766034, "uuid": "58c7b98b-386a-4e67-ba77-c9946b9d8d72", "comment": "Malware payload", "value": "c5dff53faba54cd3e807eacec317ba2bcd52672bc3843b7a7d9bedd6796d7eb8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766034, "uuid": "b2ddb3aa-268f-4d6b-bfc3-00673b992ab7", "value": "T14732B17125F14C333A706944B3772BA6ABB6D95385E3318C35DE2E366F86F02B1AE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766034, "uuid": "28ed88bb-611d-459a-9c5e-758422cbd615", "value": "96:cRuKB6es5FUJRxG22lQxfafW5SKSOSCgHSajmYmFZ6xz6fN6fE70:cRuu6ernThW/F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766034, "uuid": "8933acfe-3c8b-4b78-b040-41b529a40f30", "value": 11865, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766034, "uuid": "908221b5-4cab-4939-96d0-50f865705f1b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "565cf50a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766034, "uuid": "f183e038-14ec-4518-9aee-204fef9e0e57", "comment": "Malware payload", "value": "5f898b34303ff0e0f1e2dd360a7dd66f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766034, "uuid": "8a05f6a8-1ed9-4b41-9794-1d375a5d33c2", "comment": "Malware payload", "value": "cfeda031e0fe5bd0e117386de2bcddf779e795f7e9c1721af96d26d4919e12bf", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766034, "uuid": "703cc535-f88c-4d93-a169-3f47d380f5e4", "value": "T1D941C97125F20C333A606584B3772BA6AB76D95349E3218C35DE2E356F87F02B5AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766034, "uuid": "c728c6c8-8e64-466d-982f-9ea3d5f8b638", "value": "48:cnRu9RnnB6gZvYrmSJYlr8BsJYlriRsJYlrEsOlwnb:cRubB6TW0xkxTb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766034, "uuid": "e6a50251-22b9-49e6-acf8-bcfe7674d6b2", "value": 2429, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766034, "uuid": "b864788f-1998-4931-9427-bc185490940f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56e80125-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771766034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766034, "uuid": "817ef361-bfdd-4d49-a6c4-e1cf8e911f41", "comment": "Malware payload (Mirai)", "value": "9f69e7a37ee9f0641cd0cde1013c5b24", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766034, "uuid": "dd6321df-0e22-4cb2-83c6-956902554ee5", "comment": "Malware payload (Mirai)", "value": "febc6b284c24a2dac67c3286eeed3de1ec5eb63ee0b4bce269659ba5a660ec4d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766034, "uuid": "d0daee2f-1e1e-427d-a90c-b25d47ab2706", "value": "T141431992BD9245BAC6C453FAB71A928A337323A9C2EF7347CC180B51668A50F4E77D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766034, "uuid": "e1445b3a-819e-49d7-9c61-2ec60bd916fd", "value": "768:YeuLWZsT/hnkpYGLFlD75rvk2fhOk3gzhB74eCp1JXzFs0nKz:XuLWG/hkphlDtrRfhO8gzhB7uX+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766034, "uuid": "7fe8b70e-9906-4aa2-9412-4e550e4a5136", "value": 60324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766034, "uuid": "a8ceab7c-84bf-4e35-9e28-661ba4f73ab4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57095155-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766035, "uuid": "59897157-fd89-4988-b44d-117d5695a48e", "comment": "Malware payload", "value": "461fbaae1996d4d2882917b8096e4cf4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766035, "uuid": "24409819-b4c5-452e-a376-0c25b83f23e9", "comment": "Malware payload", "value": "d7bd4289c31142abf8f27949986e13b7848d77efb5807a5ec57c6e4cc6b37d17", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766035, "uuid": "ea532f71-137f-4fe8-bf84-e0410e21e647", "value": "T14721667025F189332AA05544F3732B59BB72D8474193218C75EE5E321F87B42B1BF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766035, "uuid": "d1a5bb57-4861-4846-95c2-dfb724dc2833", "value": "24:cniRHRURCxO0tbmN2M1sLobHxlc9HHE8zS8N1lDHUeN:cniRxuGRys01lwnEOVN1lrX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766035, "uuid": "76dfd1ce-959b-4c49-adc9-fc1a30a3c532", "value": 1155, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766035, "uuid": "0af0045e-1ef2-4674-a55e-5ac267c5e07b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57bf4d47-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766036, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766036, "uuid": "7f0d5a15-4bef-4bfd-8f83-3592dc609feb", "comment": "Malware payload", "value": "6562310e1071998d20da5a38731d0309", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766036, "uuid": "403d342b-24ed-4584-8678-771d538152c6", "comment": "Malware payload", "value": "ca05e83ccbd2466c707595073f9fdcb128faeaa8ef26fe50f6fe0071850cc0ff", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766036, "uuid": "895a7395-c01e-4c14-9b5c-acc82ef4d968", "value": "T12D82493721F14A33A6A055C4A3771BA14F72D61745A720A8F4FE1A369F5AF0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766036, "uuid": "8f086390-0c32-4def-8723-fb36881fe179", "value": "96:cCuhB6n7sht+O+v1fsn+h4+tIicqbA/GsGCuKNppjrwax7+fkxqH3CFHbISQgl9y:cCuj6nC4hvZ5mzjqKNpUPUHUGLQmO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766036, "uuid": "555db52b-5bf9-49e8-8a3c-4e68b33da49e", "value": 18063, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766036, "uuid": "c952375c-e556-46e1-8d19-d44e5074a45c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58481868-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766037, "uuid": "6d499e85-408f-460e-952c-932e97a2d95f", "comment": "Malware payload", "value": "6dfb4352b15e12ef040cac8b74bd8015", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766037, "uuid": "7da59c63-dcf6-4c38-b082-fa1346985115", "comment": "Malware payload", "value": "9fb4b026b6295176b801cd3f1815093042260a27afb9b38fd7a7546a822ea578", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766037, "uuid": "408db94f-b77c-4632-9c03-8b081e490874", "value": "T152325B3721F08B72D7D021C8A26716A55F76A60B456714B8F4BF1A399F5EB0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766037, "uuid": "1fc44fdf-94fe-466d-a0fd-c70bd2b675a0", "value": "96:cCuO7sht+O+v1fsn+h4+tIicqbA/GsGs9WXYUvIynt6fM6ft6f96f8TH+:cCuOC4hvZ5mzjy+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766037, "uuid": "16e675ae-6901-4737-bf2d-80721ec68b52", "value": 11139, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766037, "uuid": "360503c0-6d84-4249-802f-7a877d24308e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5afadb5d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766041, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766041, "uuid": "deef1e54-3c5f-4662-817c-dadae63e3976", "comment": "Malware payload", "value": "afed654b07689fbaca1d4b65cf836c7f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766041, "uuid": "66f85cae-88c5-4cd0-b295-1d87348bcd35", "comment": "Malware payload", "value": "417ca0ddd9398718b4f6923db99859900fae7d7e56bd3d4825c62068850bec19", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766041, "uuid": "14f502d9-3a1d-43f7-822c-37411483f25b", "value": "T13281967035F04D732E616A80F3372B96ABB6995344E3318C35DD2E265F86B12A5FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766041, "uuid": "80545912-0294-45f2-9760-5125fd71de52", "value": "48:cniRxuGRy/+DdvnSfr7lwnYJ/dl/B4Tilwn8Gs7wnizLI7wnE/+ol3+L+ol3Mt+r:cWu47kQMaXv+R1mhm/IBRIBxIBC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766041, "uuid": "4aed4c44-daf5-49da-9c73-cf0880ff51de", "value": 3972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766041, "uuid": "c08f749e-0076-44c3-b9e5-198dda20c782", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b611ab8-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766042, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766042, "uuid": "73e239ed-74e1-40f5-950b-52f54dbc27b2", "comment": "Malware payload", "value": "3d3d2466a6d5f6c57820ca1ae502d202", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766042, "uuid": "170abb3a-16b3-41a9-9c79-044a51e39fc7", "comment": "Malware payload", "value": "dd03c2bc55c3d4fc739f3584634772d71a0465d1b0f85a22022cab2da643db34", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766042, "uuid": "0fb37b1e-24f4-4d47-9a6f-437a56bb3e01", "value": "T1CE42683B21F08B32E7C051C9A3661A614F72A70B456714B8F4FE5B269F2DA0370E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766042, "uuid": "423dd720-1c9e-4301-ba05-2335bc41a2e3", "value": "192:cCul4hvZ5m5FG4j4HKNpivINuVskuX97IhBWiE:a4hvZ5m5FGGoKNpivINuWkuX97IhBWiE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766042, "uuid": "4cef82d3-79b5-4d3e-841b-3244610d6399", "value": 12703, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766042, "uuid": "9ded354c-cb7e-4233-9a98-9acaf101f55a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ccad4d0-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766044, "uuid": "e692c0fd-df3b-4a18-a249-6f99748f0993", "comment": "Malware payload", "value": "66af8e6d3be14188d52558bafaff8643", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766044, "uuid": "170569e3-e777-4947-a37f-db6bf0057065", "comment": "Malware payload", "value": "339fde809edb16ff5050cc02d1f1b137735c33fefbd0764e7261d3d04e953812", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766044, "uuid": "0478bb42-a0ab-410b-8d32-72e5c22a4ade", "value": "T199F1D16B21F08B71D3D421C9526655A54E71A70B992A08B8F4BF973ADF2C90370E3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766044, "uuid": "937190ba-9bc9-4331-83c9-bb26a9a436bf", "value": "96:cCusB6n7sht+O+v1fsn+h4+tIicqbA/GsGqZ4BPOHF:cCuI6nC4hvZ5mzjHOy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766044, "uuid": "c728123c-6c39-4e2f-9acc-b5b42fd2efb2", "value": 7508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766044, "uuid": "42b01e1a-e7d3-4b1e-8557-baa708c180a1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d07fc95-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766045, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766045, "uuid": "115143cf-76b3-4865-8f63-14be23805634", "comment": "Malware payload", "value": "174208bdbd56a5a5efa27249dbf1b4d1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766045, "uuid": "38c10777-23f2-4636-877a-e331d655d0e0", "comment": "Malware payload", "value": "0dfcd9f9e197545af7e95ade72fe4990c46082bc1cd2ca3e8d0104b71574bc8d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766045, "uuid": "61c4c097-dbaa-4d59-b5b4-7ec9d5f0645d", "value": "T191A1C8B424F00C332E615680F2772BE66BB6D95355E3658C34DD1F396F8AB13A1AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766045, "uuid": "6bb8169c-53c9-4174-9e67-b8c62b888079", "value": "48:cnRI9RnnB68wUblr8LUblriLUblr46UblrXGUblr+fUblrM9UblrioUelrXs3lwg:cRIbB6Exbx5x+xjxPxBxWUJ/vw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766045, "uuid": "53db8c55-2573-4317-91f3-e6ccb70a7347", "value": 4810, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766045, "uuid": "809384b7-19d8-4ad4-8692-c5d36e40ba69", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d2ed0ad-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766045, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766045, "uuid": "f843a0b2-d9ec-42be-bb73-f5c16a47c877", "comment": "Malware payload", "value": "1f292e81746436c6c8ed7a833a267a8b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766045, "uuid": "137dbc12-e396-451b-bdfd-c2c70d4f20b6", "comment": "Malware payload", "value": "d479800e8d2056d244c73cbbe5893dbe105eaf968ad2a43142c0486732ba6d9b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766045, "uuid": "9c5ba32d-9b76-4110-85c0-75ff84a27f35", "value": "T18642087425F00C332E605A40F27727E6ABB6D85349E3258C35DE1F35AF86B12B5AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766045, "uuid": "9fe3ad4d-0dbc-4e95-a393-fc2733290c0a", "value": "96:cRu7B6WxWxJx1x71N2Rr5djGjmpRTmHWI1iza15J31aLtYyw7fQ2POYI6pbMtwHu:cRul6wL3//LLt+DQpYS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766045, "uuid": "91827ea5-3d57-40e2-b54b-820ff53ba1bc", "value": 12619, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766045, "uuid": "a03500c1-5bd8-401f-b371-4c7205049e40", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d875bbd-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766046, "uuid": "daec5e90-ef2d-4fdc-9724-4ae50484bc2a", "comment": "Malware payload", "value": "8d03aa89849eae389e9495d86b7e2503", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766046, "uuid": "693a3984-305d-4550-ad67-0681b10084fe", "comment": "Malware payload", "value": "079eeeb6a8c7c72876669f12fdefd507c36572a8c9688ca74f429985dc7f2b7a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766046, "uuid": "f5d56ee5-a5d1-43a7-91b8-866eaf528ade", "value": "T1E5D118B025F04C736E601684F3772BA6AB77D85389E3618C35DE1E296F87B42B5AF0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766046, "uuid": "c8b57750-b461-4276-9e1b-f42349234f0a", "value": "96:cRuOB6/rqBi+8u56fm6fexCUxCafCqEKEVdENE0tEAEpgEFElxc+:cRuC6zclZ5v8MFxp+o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766046, "uuid": "d2e91104-2b4b-45f7-90f3-30ecdd093a59", "value": 6319, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766046, "uuid": "15f5b4ae-4bfa-4b28-a31a-77ad35f7fb0e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e4d4a0a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766047, "uuid": "cabcef3a-c965-4e10-87a4-21459d8c6810", "comment": "Malware payload", "value": "0dde628cc484b0a9f8b789a528ad0cb9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766047, "uuid": "fc02246d-1897-407e-932a-e5fc169b83d0", "comment": "Malware payload", "value": "53b4d193626c6274e78db55a71363076f60c41038fda3a512ed6ae0aabf41fa2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766047, "uuid": "2ac5c07c-c7e1-45b9-a7a6-d49b7d3d96b1", "value": "T1B65172F424F04C732A212984B3772B956BB3E95745D3568C38DF2D295F96B02B1EB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766047, "uuid": "d819efe3-4d97-4185-b3d0-0b21485ea1e6", "value": "48:csRu9RXfYnB6gWSqylrh5Ilri5KlrE5Llrb:cCurKB6cqwSN2b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766047, "uuid": "07a0c114-fddb-441a-a8d0-c50cc9bbaa7f", "value": 2574, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766047, "uuid": "d25b64e3-81d1-479b-b494-e875280f392c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ec3eb4f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "9f773329-2590-485f-9392-18232c41b811", "comment": "Malware payload", "value": "8f8d421508a1f33914733b601e37a6d3", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "4af9c3d8-b15a-4f77-8993-46aae5abc27d", "comment": "Malware payload", "value": "9be2715d564019eed27ca252949d6003195ae577071651c862f9e66b0d0f7f44", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "0c7b9110-da32-471a-bcac-82bd5d577510", "value": "T1BA411CB520F1187329245640B3331BD5AB72EC53599326CC38DE6A3A6F96F13B1AB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "5faebf3a-ef3b-464b-8db7-b408bf0e6a54", "value": "48:cgRu9+OA4R/anB6ghGk7lrmPX3lr8PJYlrF:c2unA3B6v24lhF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766048, "uuid": "a01391d4-5685-4260-9ce6-f5926c1b458d", "value": 2015, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "c6e7a839-9ef6-4aef-99c6-c3f8da33edc0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ec85ed3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "6ca7f9f5-7c2f-4f1d-bc4f-e623f57251a3", "comment": "Malware payload", "value": "863b341339924ce20e49d3d01f2b6c96", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "8fe762a5-7ce4-4d78-9e22-3fe4757e3a5e", "comment": "Malware payload", "value": "b9762acb1c10c05c202d031da5ca9acba484bb4f7c73b744ec59f0e9609a7dc9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "bb347f17-648b-4ea0-97e2-81ac44fa49bc", "value": "T1CF32373B21F04B32D3D051C9A3671A614E72E70B456614B8F4BE673AAF2DA0371E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "aea68fc0-cfb8-462c-a530-e823b7769351", "value": "96:cCuOiB657sht+O+v1fsn+h4+tIicqbA/GsGCuKNppjrwaTNQOlHECx2x5W:cCuT65C4hvZ5mzjqKNp7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766048, "uuid": "916e7d59-574e-4665-869b-b06a568c0e59", "value": 11456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "04958ce9-fe79-4ac4-9a03-5bac7b532f2f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5eee7864-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "c0605e00-d182-4541-a030-7feafa65a102", "comment": "Malware payload", "value": "33204a626b72377e18b3cc82edb8c1d6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "09ce1023-9105-4d0e-8b74-940fdf0eec46", "comment": "Malware payload", "value": "c299c69b4b36e7201e7be9a10cab2408d3ce770bbca740c83f2f378652dd573f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "030bbaf2-3d53-4ebb-b0fb-b7fb258b99b6", "value": "T12C427A3721F04B72D7D025C8A2661BA14F72A70B496714B4F4BE57399F2DA0374EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "07e9cc48-a149-49c5-b454-1ac1e732886c", "value": "96:cCuO7sht+O+v1fsn+h4+tIicqbA/GsGCuKNppjrwauZow6fS6f16fK6fz6fOAAZ5:cCuOC4hvZ5mzjqKNpan6S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766048, "uuid": "539fcd54-9fec-4fb4-af42-ad0b6d864950", "value": 12942, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "72a4c3f5-46bd-477f-8da6-d6df3909b892", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ef4746e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "9cde2900-9c2c-4faf-9923-d79a9eff1d3a", "comment": "Malware payload", "value": "60f1d861fe4fe8cc5d8643211d6d452d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "99ba0a5b-7a94-42fe-a8ed-c9476d7d925a", "comment": "Malware payload", "value": "f656eac8a3e1fcc04cdcb3b7eaddc0689fa99b67d0bcd75389b1922e7e65d39b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "0b733f13-dc09-4a35-bdf3-4c6be50b6503", "value": "T132512DB414F00C332E6156D0B2732BE96BB2E94756D3A6CC34DD1F392F9AB13A19B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "c0fbf66a-80ca-4c6e-a27e-bd67a552fb73", "value": "48:cnRu9RZanB6FwUblrALUblrGLUblrIeIUblrnwUblrX:cRu9oB63xvxtxDxxxX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766048, "uuid": "1ea502d0-17ad-407f-95e8-8e5eebf29356", "value": 2645, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "daf95095-4b2f-4896-b9a1-5ee9b816c276", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ef7b19a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "c87d1021-93ac-485f-9eeb-f93eec26353b", "comment": "Malware payload", "value": "ff8d633d7ce6c9aafcf62437d199e286", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "f8c51d5f-74ad-421d-a553-07bacd64e967", "comment": "Malware payload", "value": "f4a0124caab5ae0f22c174fa6d4c6bc5da63ed1e23d534e6e782d8ba3359a46c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "5219d96e-05e0-46cb-bcb1-a49e4bf404e1", "value": "T14E61D97024F04C732E205980B3771BA6BBB6D85349A3758C35DE2E39AF87B12B5AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "ba898841-39cf-450f-9121-880dc808e717", "value": "48:cnRm9+p9nB6gUIdlFmRpkdl/81lNN1IGYlrk91QRp1cychClrFs9ClwnEZvYrxZH:cRmSB6qXaN13K4Kp1p98XhJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766048, "uuid": "c178e9ef-0324-4947-b0a0-2d0c3335916c", "value": 3310, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "095191d9-4762-4afb-9d2d-bf08c3602b22", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5efd19e5-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "b18fff29-81f7-4e56-bbb4-e8104cd76d95", "comment": "Malware payload", "value": "8b5d595f6052140081f8603f45344e8f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "bf3582d8-2391-40d1-bc2b-6387b7615b7e", "comment": "Malware payload", "value": "f5cf341e5df3d8e981f8f61acf717adf36f7e56dc52f725ad8ccb80211d4176f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "d7fada0c-02ce-4bb1-9594-3ccaba1cfd35", "value": "T1E742673721F08B3297D051C9A2771B614F72A70B456724B8F4FE5A269F2DA0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "a2bcca4c-f600-4da2-9042-d1428b2c8f27", "value": "96:cCuisht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waYvjskQtoxIBmIBBIBUZ:cCu34hvZ5m5FG4j4HKNpivXd5W5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766048, "uuid": "58e71e66-8253-4c7b-93da-602a221b4fcd", "value": 12470, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "a1d8f8c4-83af-4cca-a698-c86b622fe3ce", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f1183b2-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "b4fe011c-0486-414d-8ec7-59f25cd5c5fe", "comment": "Malware payload", "value": "27ce3b5d511752f16100ac6ece3d7256", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "f9c54208-15ad-40a2-aef0-165e07dd08b9", "comment": "Malware payload", "value": "edac6c174858a6c640ca16099e7a7f0514a041777526fe7e9c67d877cbc7f73c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "9b8ce63c-8dc7-401a-b4fa-45d5c0fe769c", "value": "T16D825B7621F04A336BA055C4B3771BA15FB29617456320A8B4FE1F365F5AB03B0EBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "dd8ca58d-ddb0-4caa-834c-85f268dcc187", "value": "96:cCuRk0B6csht+O+v1fsn+h4+tIiKqCTyOysuKNpUj4waYvjzzNGyUfosIbIbQuTh:cCueg6p4hvZ5m5FoKNpiv3tz0EfM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766048, "uuid": "5ad3106d-9a33-4644-bee1-f2de31a7b244", "value": 19223, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "39d7e6fd-a9cb-41ef-b278-a6f92e872e01", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f188666-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "fdd3c7b0-1944-4520-af79-2adde560d073", "comment": "Malware payload", "value": "2aedda2c4cd437d8ce56e6b76124c932", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "f5963f4f-fa20-43c3-a1aa-2fd391a7d104", "comment": "Malware payload", "value": "8973b3766aea5694e051e28310b6be7ff346ae295c82efd20a25892d6fb409d4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "c38c0cac-6547-4cba-9f45-63c393c34d10", "value": "T1F232893721F08B32D3D010C9A2A61FA54F76A70B492614B5F4BE6739AF2DA4374D7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "308c50b6-9309-47b5-8875-693446fa2b57", "value": "96:cCuO3B6csht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waHv6+26fS6fE6fOK:cCuG6p4hvZ5m5FG4j4HKNphv3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766048, "uuid": "1038be7c-ae16-48b0-8e82-f9d920d8b8c6", "value": 11958, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "d231552a-d122-46da-89aa-d80ccb7a759a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f374f6f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "82fe4e7a-c106-4b5b-8f0e-20634a177768", "comment": "Malware payload", "value": "f6e9c74ebbfda8edf6367b20b30dc2e0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "8b373935-7175-4e0b-9a74-63681090f876", "comment": "Malware payload", "value": "2a1acca2f72d3f30a96bfe1ab58ae574b38b9e9d3f4c73667541e87da7779c93", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "19458796-83f8-497e-99e4-d566c5243354", "value": "T1BC42553B21F08B32D3D410C9A2A61A654F72A70B452614B5F4BE6736AF2D90375E7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "ca534d35-9db8-439f-abdc-a337b6cf845e", "value": "96:cCuNsht+O+v1fsn+h4+tIiKqCTyOygyzYtujtuHKNpUj4waHvjTUkf06fG6fo6fC:cCuk4hvZ5m5F/r4j4HKNphva", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766048, "uuid": "ecbd261e-cae3-4e67-adf3-5dfebb6388f4", "value": 12207, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "36ecf2ca-373e-4f5a-9232-8643270a924c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f467dc1-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766049, "uuid": "bc42b99b-aaee-4e9a-a72e-b58ef06a991d", "comment": "Malware payload", "value": "40e3e08b9925d0f455af9d034de78a2e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766049, "uuid": "553a9e2b-7621-43b0-907b-2fdd744c6c15", "comment": "Malware payload", "value": "b53201d442d9758187e8023f03df77d6ad17c9fb825f1d9a125efcc3c9b1799a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "820710ef-8c16-4ef9-9181-339f374c4ac6", "value": "T1D552693721F08B3297D0A5C462771B614F72970B456720B8F1FE1A269F6DA0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "3499902b-9086-4dd7-b9ea-245cb6d04561", "value": "96:cCuRk0B6csht+O+v1fsn+h4+tIiKqC1yOysuKNpUj4waYvj0+7IB2IBOIBLIB2I8:cCueg6p4hvZ5mrFoKNpivgQlp8JUFRbG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766049, "uuid": "a8cb670b-abd4-414b-bb5b-6b9e1f2fb7cf", "value": 13555, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "0b9bc6f3-e793-483d-88d1-f1e3c099fd79", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f70c52f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766049, "uuid": "28e0b9db-595c-48bf-bb82-cc30aeb51b53", "comment": "Malware payload", "value": "65f5675096b2cbf37c72e623b1b04155", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766049, "uuid": "0aadef96-ff30-432f-bb10-6c03fb3fca66", "comment": "Malware payload", "value": "09e736d5b70cf63735d5645d83044408b5de70c431aa41610c1366bf77df5220", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "975cd7ec-8f76-4da8-9e9f-521a0a8335c8", "value": "T19B42893B21F08B32E3D050C963A61A614E72A70B456614B5F4FE673AAF2DD0371E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "a7525c4b-67fd-4b00-9cbc-798044665f10", "value": "192:cCul4hvZ5m5FG4j4HKNphv7fOQ4lVSPPffVITOe:a4hvZ5m5FGGoKNphvh4l8PPffVITOe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766049, "uuid": "26470a90-fad6-4f18-9f02-21b638b52fc7", "value": 12097, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "ba6fc83c-910c-42a0-9716-1974c74e38a6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f975a2e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766049, "uuid": "adb8e8cd-1370-4d9d-8172-58f1075c07bb", "comment": "Malware payload", "value": "5f9ef53b357a5b1bbcbd46d12e5296ed", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766049, "uuid": "626be4d0-7b99-41b9-a3aa-27ff677e2ab9", "comment": "Malware payload", "value": "303361f16329cb940b1bb993097d3671b7c1881aefb49d8e19cb8cba9fa64f2c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "8d96aa36-4038-472f-9406-56bcad58b713", "value": "T119315BB421F1583326642680B3372F567FB6DC03499311CC34EE6A396F87F02A5BB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "556c5d3b-faf3-4e92-9bbf-2b587f7163dd", "value": "24:chnRUR8fAR25xifqM9HHIuCzCRpYdZeda56KLUlc9HH/+vLSifqVlc9HHVeN:chRu9RF3nB6gdaqlwnmvLlKlwns", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766049, "uuid": "145b91e5-df82-426c-8e3a-551f2b11159e", "value": 1554, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "3119deeb-ac15-4fc6-aad3-9d71af9903ab", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60a317ea-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766051, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766051, "uuid": "f0c53f81-6fd5-4128-82e3-ac6293c40277", "comment": "Malware payload", "value": "83d3a69f3e20f17d5b9403f1e29eb67e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766051, "uuid": "465d2f1b-3970-4a9e-840b-8505e547b0b6", "comment": "Malware payload", "value": "fa6a261a4736de0bcd9b28ca81e8217fdaf9a7e5ffc5dd9ca1ca3469fc7ab71f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766051, "uuid": "387b5fe0-d0bc-420d-8b02-4dea6733e492", "value": "T182019C7026F159332A901540B3732B1D7F31D84B809311DCB1EE9A314F87B82A1BF0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766051, "uuid": "71778910-893b-4c36-88b7-ab0647eda811", "value": "24:cniRHRURCxO0tbmN2M1sLobHxlc9HHveN:cniRxuGRys01lwn+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766051, "uuid": "63bdb1b0-b6ab-4548-8645-7d948e80a30c", "value": 808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766051, "uuid": "c3c64daf-f0a6-47b6-8986-1aea57f5f9d9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "617dff64-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766052, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766052, "uuid": "d15482cc-0b53-4d6c-94bb-fab0ba0aea0f", "comment": "Malware payload", "value": "1711d855370d0dda74e4c0121452e4ea", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766052, "uuid": "4178c103-ac83-41a9-baee-9f2c48c8fb65", "comment": "Malware payload", "value": "0cf1d5a734c1a89018c86462d3a2202fbaf4c5b831dcd11222671dccfbb87602", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766052, "uuid": "9dc6cd90-6500-4c7a-9440-295d8d663300", "value": "T1BA92917620F08A335A9055C4B3772BA15F72965745A320A8B4FE2F359F59B03B0FFA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766052, "uuid": "2378281b-5b00-4d65-b7f9-a75e7af396a1", "value": "192:cCuDg6p4hvZ5m5FG4j4HKNpiv7YSdAiyfEsUzUGf:Mbp4hvZ5m5FGGoKNpiv7YSdAm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766052, "uuid": "090f9f2e-91ca-4b03-b211-48307b6dad88", "value": 20936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766052, "uuid": "740611ab-1325-4b0f-b84a-c3a527a1bde6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "629cd6b0-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766054, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766054, "uuid": "0f8d5b4e-5467-4bc7-b7e8-50aa8d4dee0a", "comment": "Malware payload", "value": "88772f032bc23e261a8c1cfded848336", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766054, "uuid": "35d18e98-65a4-4a57-9e91-a8d4070d0628", "comment": "Malware payload", "value": "44cf945d299219d1e73eaba6d74624e719ad7430ee266a85f1d1b5c7c234fed0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766054, "uuid": "31b0e021-257a-48b7-aa54-aeadeb664f76", "value": "T13FE1FCB424F00C332D615A80F27727E55BF2A55756D3A68C34DD1F3A2F9AB13A1AF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766054, "uuid": "7c4ac2cd-4bec-4b02-82a6-56b679db2d64", "value": "96:cRu7xIxGxAxKxzGxpxSx1Cx0x+xqxKxKxEkQ6+:cRurO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766054, "uuid": "f1f1a19a-a95d-4c5e-9106-6c59f155ee52", "value": 7077, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766054, "uuid": "3b43da69-07b2-4487-a1fd-374b6ecb135a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63b21cdc-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766056, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766056, "uuid": "c0260b71-17f0-41d9-9c83-5a9b7af939c2", "comment": "Malware payload", "value": "2250c888f89c6dc34c80f3b34b951325", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766056, "uuid": "afdf8ede-4da3-43b4-a4cd-e113f76bbdea", "comment": "Malware payload", "value": "863eb79f9eafd696ede0a898035cfeeb275e5381a8b6232328fd73d849380d4b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766056, "uuid": "65908bf4-671a-4d88-ac2a-d78f06c7f368", "value": "T1A5223E7034F04C732E256580F37727A69BB7A85749A3318C35DE1E2A6F87B12A5BF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766056, "uuid": "5c052dfd-b2ab-45ff-a736-98fe50d73ea1", "value": "96:cRmX9Eh9mLj+ksN8ZPa65UOsp8CfUwD14Ims2hXY0:cRmACX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766056, "uuid": "bc12eea8-f944-46bd-ad06-61b732059872", "value": 10178, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766056, "uuid": "6ea31ef2-20fb-4592-96de-b4571ae54328", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63ea38bb-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766056, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766056, "uuid": "383b5a1a-99df-4b75-a7c9-d3d606e4be62", "comment": "Malware payload", "value": "078ceb23b0b5b1a864222e3a501116bf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766056, "uuid": "e31731ea-bc0a-496d-aeb3-f1e34c07dd3d", "comment": "Malware payload", "value": "39424b8b1b429bc0c46266738da9647d54fc14a6eb49a0edeecf399a549f341e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766056, "uuid": "01f0f453-b541-4093-bf1b-07c29a8b694d", "value": "T1D122472B21F08B32D3C461D953A65A610E71AB0F452614B5F4FEA32AAF2C90735E3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766056, "uuid": "370967d4-22a7-4a75-b7bc-4bdb757967ed", "value": "96:cCuENiB6csht+O+v1fsn+h4+tIiKqCTyOysuKNpUj4waYvjDiXMTyXpITziX:cCu6W6p4hvZ5m5FoKNpivniXMGXpITzC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766056, "uuid": "b1aa2be8-8694-4a94-9b23-7302859bad1c", "value": 10030, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766056, "uuid": "d615c5ce-0985-48cb-95b8-1b0b2bcd59ab", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "641aedbc-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766057, "uuid": "36b16831-579b-4eb0-b17e-c750b886ca40", "comment": "Malware payload", "value": "48d33324cd4a65984c6de030608b1f61", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766057, "uuid": "baa1aba6-24f5-4378-a6a1-71a9e49ef0f2", "comment": "Malware payload", "value": "5dacab9c50ffd3c66136668d67a7b8da5199bac3654c7c9fd539e77143b515de", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766057, "uuid": "d4725a80-2a38-4878-8fb5-00e6e4c6e38d", "value": "T1BD42353721F08B3297C055C9A2771B614F72970B496714B8F4BE5B2A9F2DA0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766057, "uuid": "969baa9e-93fc-4559-a7df-55ef580ea783", "value": "96:cCu3k0B6n7sht+O+v1fsn+h4+tIicqbA/GsGCuKNppjrwaaIBRIB0IBT7IBbJYJ4:cCu0g6nC4hvZ5mzjqKNp02LG7hxm+W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766057, "uuid": "3f67a21e-7243-4f10-90fd-29100a8f3c87", "value": 12356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766057, "uuid": "ade6d2eb-641f-44c1-8ba9-0159a0400ded", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "644e92b9-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766057, "uuid": "0f4cf4d8-dcdd-4570-a996-a16cd333f774", "comment": "Malware payload", "value": "9392790dd7c29c284c80f3d0b6210caf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766057, "uuid": "3b600aa5-5ea7-488c-9985-eaf17e41feef", "comment": "Malware payload", "value": "5ab89b1ccf4bdde388133fc6e89511a07d4b73c99b210cbe667ffb61ab620239", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766057, "uuid": "719cbcec-603a-45ea-b764-c46ec1df73c4", "value": "T15681DBB414F00C332E6556D0F27727E56BB2E94356D3A68C34DD1F392F9AB13A16B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766057, "uuid": "4f46f701-5f34-45f0-9243-3c5dbc35b908", "value": "48:cnRV9R3NonB6sza/7dlwnmwUblrAwUblrGwUblrIwUblrqwUblrQwUblrGLUblrW:cRVrNiB69amxIxGxAxKxYxtxW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766057, "uuid": "4f3ad9ab-7103-4bb9-a304-461370d02737", "value": 3834, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766057, "uuid": "22711de2-c2b2-47f4-9b74-ae81cf8dade7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6466346b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766057, "uuid": "fd32cd9c-4bba-4051-a7dd-93cc08676473", "comment": "Malware payload", "value": "734f5dc6dec845320fad8f0f914501ae", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766057, "uuid": "e902cf69-f420-4487-a6d0-9cde5e8a87f6", "comment": "Malware payload", "value": "c65ec54f0ecbb7b522571dce4d407b2a40bdc5baa2686acd4b02031fec2e94ae", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766057, "uuid": "e72f0dec-d6f5-478b-a1ef-dec18b56e44d", "value": "T1F4215E7890F21D732A1CB84076F327857E73DB26965223E835DE5F974B8AA03625F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766057, "uuid": "35a315b2-181c-4e17-8bbd-a534ab7a23e2", "value": "24:cniRHRUR6Lo/iPdFHjeef5uZW5FkXdflUlc9HHveN:cniRxu60/iPdFHPwWYclwn+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766057, "uuid": "f7028b83-769f-42a4-b7a1-f413e1c35df6", "value": 1140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766057, "uuid": "420cc302-0952-4c1b-b339-db3124a335de", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6466de75-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766057, "uuid": "19c1dad6-5b8f-47c1-8f9b-5aab1a8d0ac1", "comment": "Malware payload", "value": "dc946cf593d473467e9ed93bc9a4ddfa", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766057, "uuid": "949f2079-b475-454f-8c89-28dfc7515132", "comment": "Malware payload", "value": "27203c1d6ef6b974db0199885189f7e82a538928c5c9d8729243c90aca4e7c4c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766057, "uuid": "8b2539ea-b635-4e60-b494-54f6d6b1b06f", "value": "T15462473721F14A33A6D054C8A2771BA15F72D617856720B8F4BE26369F5DE0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766057, "uuid": "be1f2316-1d04-4680-8514-4ff5b4a8f498", "value": "96:cCuhmB6csht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waHv6Ml6fz7+kxBhz:cCuhK6p4hvZ5m5FG4j4HKNphvIjn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766057, "uuid": "83ad1cd0-61e2-46a2-b5c3-b008006b7035", "value": 15325, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766057, "uuid": "2bb1d488-89c1-4005-bff8-14c9053f08aa", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64765ea3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766057, "uuid": "b70749da-abb2-489b-bba3-52572c1553d3", "comment": "Malware payload", "value": "ab61c9780781be1888e6cbf67710d7bb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766057, "uuid": "79f9199c-a4a2-4149-8b08-4b5c4e5b3ad3", "comment": "Malware payload", "value": "2c63053ff6bb464b38a1526675d361474354f89fa3c9351af2adbeea75cd1af9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766057, "uuid": "12751fde-eef1-4ca7-9dfe-0310b8a133de", "value": "T13322692B10F08B32D3C450D952A65A610EB2A71F452614F5F4FEA32AAF2C90735D7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766057, "uuid": "289b1c67-687e-4004-99f3-d019e44d42d8", "value": "96:cCuisht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waYvjGVTLKfccITQioVB0:cCu34hvZ5m5FG4j4HKNpivqVyfccITQM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766057, "uuid": "665e0f60-4e56-464f-83ec-0fe0e35948be", "value": 10842, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766057, "uuid": "b7abd6e9-2bde-47ac-9a70-a4fa82c3fd7c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64a70323-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "fa8fc8f8-0876-4aff-a995-01111d9965e8", "comment": "Malware payload", "value": "9d1454b9a15f370949412d301cdde4ea", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "01dbc20a-e048-46e3-af6b-04c476a98c1a", "comment": "Malware payload", "value": "27d91a2346b523180eb7b8172dc9787525c7e9feed529a2d2815c1d097377c83", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "c929b273-94fa-4865-a707-d16eb355ac8b", "value": "T18E51D77020F08D332D606684F3731B666FB2E9174593218879DE1E296F97B42A5BF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "e26cb34f-a96b-4084-834f-1cdd16b6da78", "value": "48:cniRxuGRys0Cj5Z3aorlwnaejQejZimMUq/lpNQA/y8NzbNir+s+u7c3mIi7c38p:cWu4fL3aoUv5ZHCTdIKpFVxBUSpC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766058, "uuid": "cc97d195-873b-40c4-a5fc-7d8ab7553e51", "value": 2978, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "9c11e96b-3642-4f5b-89b8-655e40343129", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64ab7ef7-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "6f6c90d1-523b-417b-a117-6cdde4f6b4b7", "comment": "Malware payload", "value": "e913bb1abbc8d7a53bba5496ccf477a1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "4bf28924-dece-4ee5-a948-988f985e614d", "comment": "Malware payload", "value": "9b1acce506a40ecc0e20ebe1860c3faa55bb22e2f54318f8e60fef2c900f5258", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "93c106e4-16be-4bcc-86ad-621e6e1d72e7", "value": "T12D52643721F08B33D7D410C9A2B61AA14E72970B986610B9F4FE57359F6DA0770EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "e6801b98-089a-41c9-8e77-c13be353bdfb", "value": "192:cCuP16p4hvZ5m5FG4j4HKNphvgaq+GVups:Fp4hvZ5m5FGGoKNphvo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766058, "uuid": "350acbe8-d5a3-4be6-a56d-4d53826d511e", "value": 14024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "6777c9da-d094-4945-83cc-a0633df080b9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64b32c57-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "16d99b64-f4c9-4ed0-9c99-036f272d6125", "comment": "Malware payload", "value": "9a67ae699fb8b732427e58980e78f433", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "7f81cd75-60c4-46fa-a013-f01867758666", "comment": "Malware payload", "value": "f14b2abe4e337cf6a5a042f360ab298aeb33f64da35ef752afaa85c1394081e2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "78ddfcd3-01ae-4d41-a777-d83585577c35", "value": "T19341887021F259332A916A84B3332B46AF71DC4788A311CC79AF6E397F47B5362AB0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "942e8afc-0cad-40ff-9f04-1ab1bcb885ea", "value": "48:cnRu9RynVdvnSfranB6/szlwnmZcVlsYrs:cRuCk0B6X3l9s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766058, "uuid": "97277d72-e7f3-4fc3-a809-e35a670612c4", "value": 1913, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "de25a9f7-2f68-45ff-856c-916359943836", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64b87aa9-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "e88669b8-ee45-44b0-bcfe-d66eb8f64f53", "comment": "Malware payload", "value": "547003ad16caf9bc8a70642962780721", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "52fe087d-a381-4df6-ac84-789c71d1c700", "comment": "Malware payload", "value": "8af726f91569c45d9de4372a6a79bf3ddf370b277cb63fea8951e5c2a6d64b7f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "8485c379-6a62-4d53-9400-f8f7eec28fa0", "value": "T1AA02473B21F08B71D7D021C8A26616A54E72A30F552A14B8F4BF563ADF2DA4374E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "15456322-81f2-4163-b752-5a2c2e244bf2", "value": "96:cCuO7sht+O+v1fsn+h4+tIicqbA/GsGNaqwB6fX6fa6fj6ffpw:cCuOC4hvZ5mzjAE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766058, "uuid": "2ff38ac6-c119-426d-aa79-9b889f3d2de0", "value": 8674, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "c0011b32-c42d-4996-935b-42772c141439", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64c32302-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "bf0ff529-8656-49ba-8984-0e912f762b8b", "comment": "Malware payload", "value": "5d6b1f910815ab128fc6625a1dc92826", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "4dc2dac0-a9a6-4341-a3f7-917be8c2d624", "comment": "Malware payload", "value": "a76252fb3847bc1eec8ade602e18dce1a8d7fdd46d43ac60d2fb17f0a9c91d9b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "5ff7483c-095e-46eb-af7a-49f660c8b74f", "value": "T1F342D4B435F14C731E611A40B23727B56BB7945749E3218C39DD2F39AFA6B02A4FE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "972609fd-5480-431e-818d-7c6ad38ed3b8", "value": "96:cRrqB6uL/7pydbpleU1eUGpE9pNZeUF/eU6inFdLeUndpZdNdVdtdWddd1uPuFum:cRrO6XeweOeke4eF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766058, "uuid": "0626ea74-a6ec-48bf-94bf-da7b5d27f340", "value": 12848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "1c6830d5-3f92-489d-80c4-f399c8e5a74a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64d3af94-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "4c395088-9650-470a-a628-6968368978cf", "comment": "Malware payload", "value": "a5280fcb2acef49598b20a71eab89224", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "40e568ed-afd2-43bc-a8ec-bed191bf8aee", "comment": "Malware payload", "value": "88a4cb44b4df969a96830c34f26f347dcf518fc64c16de5244bd23f1d57974da", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "a59e1224-d468-448e-96a8-0584c99cff79", "value": "T152E1847125F20C333A705944B2772BA6AB76D95385E3318C35DE2E366F86F02B5AB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "74582c75-4b9d-438f-943b-0107b1dd2bc5", "value": "48:cnRu9RrsnB6/wUblrbSJYlrWSJYlrGnJYlrGRsJYlrjNJYlr+xJYlr+wJYlrmsJq:cRu/mB6ZxLGNYxifImPvSKSegbzCPRb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766058, "uuid": "071a12cd-6e8b-41bf-9fe2-46ecc696c76d", "value": 7228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "962aed0d-e700-414e-9f01-fe0671b40fb6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6981a4bb-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766066, "uuid": "384f37b5-3821-4260-8af8-bbe75a51ecc0", "comment": "Malware payload", "value": "1800848a7b6bda958a96396741d0ecd7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766066, "uuid": "224dca75-9b4e-4594-81cf-38aefa8c97ac", "comment": "Malware payload", "value": "07383e16aa59c1473b555d189bc13751e9afb87849ec1fa528de82d5b5c13fd3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766066, "uuid": "f77d4e74-1831-4361-a5b4-8d8ce1d58182", "value": "T10812692B21F08B32D3C460CA53A65A610EB1A70F452614B5F4FE932AAF3C90735E3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766066, "uuid": "6d66a65a-095f-4114-a67a-63bf7c3e282e", "value": "96:cCuosht+O+v1fsn+h4+tIiKqC1yOysuKNpUj4waYvjYXVTUESXxITgj+:cCul4hvZ5mrFoKNpivMXVAESXxITh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766066, "uuid": "998015be-44ab-4a39-881e-a4c4647d3230", "value": 9613, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766066, "uuid": "789227af-8fb9-45c4-be3d-9e96ef69df51", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69cc2e8b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766066, "uuid": "c52a3e61-8c5a-47c7-b166-4c35fb5c42fa", "comment": "Malware payload", "value": "d397a11c3c8f8543bc016295bcc648d2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766066, "uuid": "cae886f2-3815-4ff9-93d2-3163fca41144", "comment": "Malware payload", "value": "bd03aa955617ad86e37e649e1d4c466a5666cb0cd08ea58d2aaf072ffa9ff3cf", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766066, "uuid": "119efd63-d35a-4360-bfba-9fe3b38d24ba", "value": "T1D0F109B425F14D332E20AA80F33727B6ABB7D45349E3218C35DE1D25AF96B12B4BE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766066, "uuid": "4d0ccde6-7359-46e9-95b9-1ce110260d24", "value": "96:cRuJY8kQX+YT++GkV4jJwIBvIBXIBiIBRIBsIyX:cRuYOdmGUIta3b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766066, "uuid": "44d379c4-a88f-44fa-8770-3674c9d041e3", "value": 7543, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766066, "uuid": "36c90f9f-4493-4c6b-b6bd-aee11f458d38", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b6442a6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766069, "uuid": "63b3e53b-ef58-4de3-a16a-7099047c3c6f", "comment": "Malware payload", "value": "a465b52ea783e8bcf6533b60bb2f5b09", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766069, "uuid": "7ea34659-f291-41cb-9f5d-aff0f054cfc1", "comment": "Malware payload", "value": "c1c19eb84182a53628ed9346a9536b4e5294ac2b0d514635959d92babae51f27", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "64a74020-f659-4404-b15a-43104977ecee", "value": "T1D232553B21F08B32D3C051C9A2761BA14F72970B456614B5F4FE67269F2DA0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "83422df8-02d5-4ac8-a8b1-b10b6bc39034", "value": "96:cCuosht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waYvjVMkQfh+tQIBPIBKB:cCul4hvZ5m5FG4j4HKNpiv57YWQEhB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766069, "uuid": "073c9dc1-bb3b-4faa-bb54-3f34da351cd8", "value": 11420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "a5e8635c-d74d-4588-8e2f-46c959c644d1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b7d4814-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766069, "uuid": "85339d95-20d9-4ad1-a347-fa2dae4fc6e7", "comment": "Malware payload", "value": "27191d6805570c1e118ea924c61a5032", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766069, "uuid": "4bd75014-e3ea-4163-9485-addfe9e63889", "comment": "Malware payload", "value": "a5de8a891dfc8c4f79bb20a04b20be2722e2b1b1abbca2a37e3ea67a3921f1ce", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "24b5d9a5-c265-4af4-b60c-1df4f2363e35", "value": "T117317A3840F21D63260CB58062B32B857F73DF538A5213DC39DF5FAA6F8AA03624B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "63b99e80-5dd7-4d54-a111-447aac8d85fa", "value": "24:chnRUR8fARW52q9HHIuCzCRpYdZeH8d/iPdFHjeef5uZW5FkXdflU1Dlc9HHUeN:chRu9RfinB6gcd/iPdFHPwWYcdlwnX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766069, "uuid": "04d7d4bc-3773-4279-9b28-67a0c04550a6", "value": 1561, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "6306e5d1-9ee6-4430-a836-929e82cff696", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b898796-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766069, "uuid": "a1dfefe1-e100-43fc-bcbb-fa42cfad85e2", "comment": "Malware payload", "value": "7f84cee1e843ca3110304e3f9acaa115", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766069, "uuid": "2a55f40c-185c-40fc-b182-c69fe07c8a8c", "comment": "Malware payload", "value": "e84d645141a713999109711635587bcdbfe2d9edb54deae3546dc3064ec78728", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "08f70b67-1535-4302-9ef3-473cf47cd7f7", "value": "T1DE21E47012F14C63265466D4B2731B567FB2ED4349A3528C39EE5A392F92B13669B0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "662b463e-9ac8-42e1-b72b-4235450e7d1d", "value": "24:chnRUR8fARW5ob9HHIuCzCRpYdZeC+Whl7lc9HH2919HH8miseN:chRu9RnnB6gC+Whl7lwnGvn8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766069, "uuid": "86441d6a-3aca-4eb4-80ed-2aa3d250b22e", "value": 1208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "65099480-c579-4f7c-9365-152c192e93d9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b903ada-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766069, "uuid": "7b98652e-f3d6-494b-9302-f83ffc2be821", "comment": "Malware payload", "value": "d357c647fad3f1a85fa9284f107c7a77", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766069, "uuid": "0c4c68f2-36ae-4eba-bc9b-951d5320d3e3", "comment": "Malware payload", "value": "46ce778ed468a54095313bbbc873fbe92f908dcfe5fff0727a5197f33da63ed1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "8421c783-1d0e-4b0e-9f0e-6af9d7fe18a6", "value": "T1D732463B21F08B32D7C410C963A61B654E72A70B852614B5F4FE6736AF2DA0771E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "81816fb3-34bc-49b7-a2bd-776a05005a61", "value": "96:cCuisht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waHv6HcQAbAAFAAFUb:cCu34hvZ5m5FG4j4HKNphv5vM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766069, "uuid": "0de3debf-0c0e-45ae-8f10-02e4f90077a5", "value": 10978, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "a300e998-522a-4c20-b907-d637efd90c82", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b916510-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766069, "uuid": "91ff60d2-bd5a-4e2b-bcee-4818fb9fa106", "comment": "Malware payload", "value": "602ae2d9b85fce16ac61b1fe8320b086", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766069, "uuid": "25ec0929-ebd5-49af-b735-29e12dfb5ea1", "comment": "Malware payload", "value": "66ef3092a483086c4c97177cde35768ac45996dc727681b35e4ae9ceedd7a9bb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "011646b3-a9ab-47ea-9628-271249a7a420", "value": "T11B81697026F04C732E702A44F3772BA9ABB7A8170597718C349E1E395F87F82A5AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "b49ee2a6-2f32-438b-bc12-a8744eb67e70", "value": "48:cniRxuGRys0Gk7lwnECtWhl7lwnmV5+ol3F9gE69lripE69lrEuE69lr+6DE69lA:cWu49l3WhmRmj6f36fM6fA6ff6fJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766069, "uuid": "3bf56e67-48de-48d9-ba3f-ad607319b399", "value": 4065, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "2d56eeb3-9c02-45f9-9d2b-9806a8f70d31", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b977e0f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766069, "uuid": "599da43d-f306-45a2-80cc-6ad9be5092dc", "comment": "Malware payload", "value": "6efa0e61e1a77459205b8435f004769f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766069, "uuid": "7da3896e-4016-4a17-a036-8abbb152ac62", "comment": "Malware payload", "value": "1068ec2a570a06056b79550ffe5f90073ca917bc520ff18dcf28f15d77e60e9d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "4ea4d16f-cb87-48c5-b429-8c1ebfb06ce9", "value": "T151313B7421F198732E901940F33327A5AB73945B45E3218C75DE2F35AF97B46A5FE0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "56a94d23-7a5b-421a-b491-3b6e81070ab3", "value": "24:cni+HRURCxO0tbmN2M1/mslm9lc9HHYxtNuPl/Ha+76UyeZjl/HVeN:cni+xuGRy/vM9lwnYxaPl/BOU/dl/s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766069, "uuid": "c7e740da-e51a-4268-a79d-c0218f6df0f3", "value": 1697, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "3e78245b-5cb0-44b3-85be-c0729b563898", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ba61516-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766069, "uuid": "2bb52986-f103-4d96-857b-7767de34449f", "comment": "Malware payload", "value": "f0eded97ea419439563819f147d87ed4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766069, "uuid": "c5a7b5fd-7d53-47fb-aaf8-3894faf6107f", "comment": "Malware payload", "value": "0892f5f430a26e8d8d0d174940a4c06046725283ef85241acecc76a753f48c96", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "400da3e2-77b6-4efa-bbcc-7bb86e862bdc", "value": "T167914C7025F14C732E206A80F2372BA5ABB7D90745E7218C35DD2D356F97B52A5BF0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "9c4aa0d2-f828-4728-9ccf-841d09046ff7", "value": "48:cnRu9RPdvnSfranB6/OLqlwnmdW9lwn8spklwniPJIrlrE2JIrlr+eE69lrM9E6X:cRuTk0B6qjCdoIBlIBA6fL6fnp05pC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766069, "uuid": "1665ee82-e0ab-487f-a535-c89f4e6e6da8", "value": 4525, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "4ccf1318-8d7c-4ba9-9d37-6da8a1651400", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e16490e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766073, "uuid": "3f0086b5-c3c9-40b6-8e79-e110534e9290", "comment": "Malware payload", "value": "de1acd296ba91a095b0b355f634c0eb2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766073, "uuid": "b5889747-207c-4dbc-a1ca-a9fb5f11844e", "comment": "Malware payload", "value": "b7bf3176d28e9632d0193a5701b0a4bf1508a51676b021dd15b65928a99f2ebb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766073, "uuid": "c427336a-ba11-436a-bf77-d72f5c359145", "value": "T1C742673B21F08B3297C061C962771B614F72970B456714B8F4FE5A269F2DA0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766073, "uuid": "c1a019a9-d8ba-49da-87a4-2fb9d7307c4e", "value": "96:cCuUk0B6csht+O+v1fsn+h4+tIiKqC1yOysuKNpUj4waYvjqlY+yIBCIB4NIB4IL:cCuDg6p4hvZ5mrFoKNpiv5JNJN7LY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766073, "uuid": "dc5dde1f-7f45-4d01-9414-8a616ea96d93", "value": 12427, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766073, "uuid": "3ec412ed-468b-424d-8a84-c6a1b0f7319b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e60a335-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771766074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766074, "uuid": "6c2d44fd-6eb2-457a-bb20-d25fc0bc9517", "comment": "Malware payload (Mirai)", "value": "74c48af16d1bd7a7aff6a5eba0542f6e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766074, "uuid": "4771e790-891a-48ad-ad93-eb4ea4971df8", "comment": "Malware payload (Mirai)", "value": "fb3e21c2bb40cd81b51934ab4877b02815ad0546eb82d936d529ec7ba1330a09", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766074, "uuid": "f2362e79-1ab7-4cff-aa5a-4267b1dc1d34", "value": "T17EC36B73C8256FA8D664D5B4B0708F789B53A91182875FBE59B7C2B58043D8CFA093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766074, "uuid": "e351d468-d63d-4332-963f-79b16cfb0a5c", "value": "1536:GKB/FzuKKZP80N0wAxxCchOK9PJmWhgq6sU2YW1OvcyynmSj:GadzumI0pxxthh9+q6oYWwvcpp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766074, "uuid": "2eb651d9-92d0-49c2-9eea-01d6a80c6141", "value": 121664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766074, "uuid": "c080dd26-c5dc-40ca-9555-b357301f30dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fe67845-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766076, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766076, "uuid": "213124bc-5626-4d24-98f9-2766514975d3", "comment": "Malware payload", "value": "ed442c3eca2618c808bcc8bc702191d9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766076, "uuid": "7e92249c-babc-46a7-8df2-3ea8f8b0c42b", "comment": "Malware payload", "value": "cce25fd82a74549fcf92edff10dd4d8f88e615471bdc6d673b68fcab63e9b6fe", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766076, "uuid": "25379948-0eda-45db-a3cc-21a534f4ca0b", "value": "T1C7528A3721F08B32D7D061C8A2671B615F72A60B456724B8F4FE5B259F2DA0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766076, "uuid": "24cc2f87-3772-4a79-be41-d56c221427b5", "value": "192:cCur6p4hvZ5mN9oKNpivvV6PFITVaHviF:5p4hvZ5mN9oKNpivvQPFITVaHviF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766076, "uuid": "766412cb-dc33-49b5-986a-838c3d21a943", "value": 13570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766076, "uuid": "beda0b6b-f4ee-4099-a940-f0d9c72883c7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "708d9a66-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766078, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766078, "uuid": "aab1d81f-2cde-490e-bd01-f32574ea0388", "comment": "Malware payload", "value": "db05bff8cb2e3d3a6fdecf63a4606512", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766078, "uuid": "165fe082-1e05-4269-b0e8-40d19552621f", "comment": "Malware payload", "value": "ab3b01abbe49ea654f946e3c5a50e6ee996a2e4d8fdabf91146a788db9949245", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766078, "uuid": "f729f4c9-6671-4c0e-afe7-bff42782b58b", "value": "T12FA27C7620F08A735A9015C4B33317A15F72955745A320B8B4FE2B39AF6AB03B4FF6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766078, "uuid": "f9b62a25-c27e-484c-a028-8a09ab06c70d", "value": "384:6L4hvZ5mN9oKNpivjF9+gukIFzITNTXG6:6LUiPN8Hvx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766078, "uuid": "5cb21c3a-dbc0-44b8-a79e-0e3ee978ad4e", "value": 21872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766078, "uuid": "4eecec76-0cd1-49aa-ae5e-25756cd3dcf3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7193fb50-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766079, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766079, "uuid": "9282deac-e37d-4fed-956e-636302432586", "comment": "Malware payload", "value": "8f08465a40e7ebf507724fe055274fa3", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766079, "uuid": "b3a91b61-6064-4ee3-b046-fea3e2f2322c", "comment": "Malware payload", "value": "bf949f7ca54f37801b5ebf190792f2b3b858f3f535dd41c2005e511cab9dc819", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766079, "uuid": "183267fc-8f5d-4aef-be93-c176ebfe853c", "value": "T17622783B21F08B32D3C420C992A61A654E72A70F452614B5F4FE633AAF2D90371E7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766079, "uuid": "7aad57c2-c18b-4270-9c4f-55e7d64249a5", "value": "96:cCuisht+O+v1fsn+h4+tIiKqC1yOysuKNpUj4waYvj1XIZrCoP6fDpC:cCu34hvZ5mrFoKNpivJ2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766079, "uuid": "7c214e57-8445-46c7-a960-2af78831d166", "value": 10441, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766079, "uuid": "81f4b424-d2ac-4a28-ae51-b39caf83e522", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72bff9b4-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766081, "uuid": "7869f709-34e6-48d0-9e01-46745ffc2fa9", "comment": "Malware payload", "value": "83f4d4c80ce29fe705d463001fb7a4cb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766081, "uuid": "0fea0630-770b-44d0-8c2a-fa019d2b6bfa", "comment": "Malware payload", "value": "3bab454a1493339b57e7df612e204b57cd3aea2f81113ce5d6802621e43339bf", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766081, "uuid": "977f4f6f-4c08-438a-b0fb-ecbb9f574b4c", "value": "T13831477411F189332A10AB80B2372B56BBB2DC4349A3268C35DE1D296F93B13A1EB0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766081, "uuid": "b507692d-0658-47ad-8b2a-af7b01511188", "value": "24:cnnRNR8fARW5wt9HHIuCzCRpYdZUX3PX37KMSChIrlDH/+7dSChIrlDHVeN:cnR/9RLXnB627JIrlrmRJIrlrs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766081, "uuid": "5f816190-2625-47e7-883c-9f882aad725a", "value": 1548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766081, "uuid": "5f7fb5ea-bf53-45ca-9c4c-b3cda3dd5284", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73cdf50e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766083, "uuid": "feca1ecd-035f-4f35-8955-c2d40fc7df71", "comment": "Malware payload", "value": "8b901f094dc0ca786eec99b07590dc5d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766083, "uuid": "73b4640d-ddf2-4ac2-b047-9f24e3a56ad1", "comment": "Malware payload", "value": "7f8acc5f4aa5c98887379ae574cfa7d6c894c71e42cbbe6ba4f582067b5a9804", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "e380ee59-61c6-4cd8-b7de-41e5fc88d64d", "value": "T123A1D9B131F10C331A55A540B3371BD6DFB6EC938CD33E88B49D0B362BA6602E66AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "1957fa58-bcd3-495c-9c0e-37d01121d40d", "value": "96:cLuA64l474n4U34jV474n4UDZnjsMnjVB6t73aofbF1uR64l474n4U34jV474n4A:cLuXYm8R32m8RDZnjsMnjn6t73ao7YmV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766083, "uuid": "7847d5ba-30a7-48c6-b938-3535a042451e", "value": 4656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "24a2bc3f-a7ea-44c4-b70c-a2013e3f4782", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73e45111-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766083, "uuid": "fc60b691-e0d4-409d-8713-8995e0921afc", "comment": "Malware payload", "value": "5d8de7f38d39e3fb77f90e68de7e692a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766083, "uuid": "e3a3c7d1-2ef2-45a9-9d57-6ae6c86ed68e", "comment": "Malware payload", "value": "1bedd8513497f54a366f976b4c61cec605e4e7f5272dce8b6f588db6c470d6b9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "e3f04ca9-5065-4281-b385-b3c346b7b9a6", "value": "T1FA314B7440F21D732A0CA59066B32B857F73DF574A5213DC35EF5FAA5F8AA03624B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "fcbb29a6-c895-4f51-951e-71c04d91e104", "value": "24:cnnRUR8fARW5b9HHIuCzCRpYdZel/iPdFHjeef5uZW5FkXdflUlc9HHUeN:cnRu9RUnB6gl/iPdFHPwWYclwnX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766083, "uuid": "c6372bd7-70de-490f-9045-2aae2016bc0b", "value": 1568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "8e719533-ab2a-4268-a72e-0212a6a50e38", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73e4e457-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766083, "uuid": "2f6e69c6-870e-4432-af30-b777009522ce", "comment": "Malware payload", "value": "bd614564919de0be305d2634424c936c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766083, "uuid": "7ecf649e-00a9-44c7-9523-e7ac20ad5dbb", "comment": "Malware payload", "value": "7ad240b1fb349d0513fc4ab467df09b256278a6c84c2d9709a8a488bc0e6e020", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "d75648b5-2c4e-4e31-9d13-45314584a206", "value": "T199C1E77525F14C333A60AA80B3772BA2ABB6D95345E7318C35DE2D265F86F12B0AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "820894cd-7c0b-4242-b4d6-0976231719e8", "value": "96:cLu3k0B6IKxGx5OgNeFmtm6IBkIB5IBu+:cLu0g6Nj81jGc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766083, "uuid": "ab0a7122-0029-4766-aae9-ef4005cc0af1", "value": 5639, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "1595049c-401f-463c-b068-8e83a991abb6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73e65982-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766083, "uuid": "9076ca41-6b6c-4072-b143-a0c8498c800c", "comment": "Malware payload", "value": "dd588d69b9ceaaac48371de2defa6303", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766083, "uuid": "bb307046-18db-4043-a249-adde5b8ddf7b", "comment": "Malware payload", "value": "cb798a83053a721cc06063443dd848ccde93705acb6fee86cfd05fd79b68c41e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "936bc26a-2354-4019-bcae-4a68c20ff5cf", "value": "T15632883B21F08B32D3C020D9A3A61A614E72AB0B456614B5F4FE5739AF2C90375E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "524590d6-b9de-486f-aba2-7bb80c1dc54b", "value": "192:cCu6W6p4hvZ5m5FG4j4HKNpivJVsQCGCndITZI:fJp4hvZ5m5FGGoKNpivJWQCGCndIi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766083, "uuid": "704f2418-cb26-4b3c-a2f5-3f427868e956", "value": 11748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "91e063d4-dd3c-4ab0-b930-5d0b7ffccce3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73f3ce93-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766083, "uuid": "b2eecd41-40ba-4340-b09a-724a151f6302", "comment": "Malware payload", "value": "f03d09e398e0e6de4c897785286b2f4f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766083, "uuid": "77a1e830-38bb-4a5a-b405-0fd22f0e7a74", "comment": "Malware payload", "value": "e1f562de3b415bcca5b5fbbae59cb76b1514330a7e6393a0b2f2eea4b92b6e6c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "003b5353-7180-4d33-9b2c-9207fc0d900c", "value": "T10742487B21F08B3297D010C962B61BA14F72970B456614B9F4FE6736AF2DA0371E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "19ac9c01-7343-4c04-9e77-e95d2b517d6e", "value": "96:cCuiB6csht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waHv6NCxml1lJje4Vx:cCuW6p4hvZ5m5FG4j4HKNphvMNLx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766083, "uuid": "9dc6123b-72bb-4fcc-b974-a1ac490f9803", "value": 12195, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "30b3f764-8743-4f92-a424-49ca0bfaeaef", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "740544de-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766083, "uuid": "e1ea3edb-a38d-4458-b150-0f57fe39a4ba", "comment": "Malware payload", "value": "c786f62101db4c9e3f716dd1014f69d3", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766083, "uuid": "6cd9fc73-185a-44bb-9b7c-a795361bd56d", "comment": "Malware payload", "value": "c04d029bbeeda1ae8957fea1291d5009bc6a0fa175f7af73f3e0c79fe05249ae", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "a0f2175c-ba54-4f6d-b081-5c1982c8a26c", "value": "T1E621E97011F558232A146690B2731F56BF72DC474993168C38EF6A397FA7F43629B0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "350cf68e-a2c2-45bc-b455-883b181b0208", "value": "24:cnnRpR8fAR25H9HHIuCzCRpYdZUX32X37FgZNuPl/HUeN:cnRb9RCnB6/FgOPl/X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766083, "uuid": "f3e19c2b-786f-419b-bdcf-b4e56614dc1b", "value": 1145, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "5ae496da-5b34-4a93-9ba1-234c2d26bdd1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7406ae1c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766083, "uuid": "41492cf5-c9fa-4422-990d-55aadc924e45", "comment": "Malware payload", "value": "7ec92f8596c70e9ccaefe77e5f011538", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766083, "uuid": "440f19ab-2b55-4f4d-83bd-dca0828a44f0", "comment": "Malware payload", "value": "a12b90d200741ceb4971909014bcdbd3374df504515a55519963092f4b947b9f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "6c01925d-d640-4530-844f-59bdbba139d4", "value": "T1CD914D7025F14D332E10AA40B3772BA27BB2D85349A3658C35DE1D35AFC6B52B5BE0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "80010479-1014-418e-ac09-942799939924", "value": "48:cnRu9RDdvnSfranB6qcRAb0lrl5R4lrkKRUGlrEHR1Blr+6RBs0vlr3v5JIrlroI:cRu3k0B6MqUbo2kf7IBiIBFIW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766083, "uuid": "f9fed1d2-937d-4dd9-ba0c-a33febe084be", "value": 4208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "f2b3ced0-ac8c-48fa-8b30-dcb94738220f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74102cf7-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766083, "uuid": "d3284474-5a67-4f67-b4e1-46547ddb43de", "comment": "Malware payload", "value": "037da4c79c62c69b3d4e6ab07f7acfb2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766083, "uuid": "f89f941e-8a05-4ffc-b0ea-8a1c596bb884", "comment": "Malware payload", "value": "0d166fe13b91f1ce39ed8a5b046ee1b9428b880a432ac7948cbd005aed23b1a1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "b2678a07-8a83-4d79-90c6-ff87feae716a", "value": "T16B12332B21F08B32D3C450D953A65A614E72A70B492614B5F4BEA33AAF2C90735E3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "50e00a73-eb76-4f81-924d-d6f208c3862a", "value": "96:cCuYmB6csht+O+v1fsn+h4+tIiKkC1ymysuKNpUj4waYvjUPZqzxs:cCuYK6p4hvZ5mN9oKNpiv2Z9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766083, "uuid": "9b3ef02a-a828-43df-a490-d26d18716a88", "value": 9570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "19647203-0b75-4594-a08c-7c3fb5072942", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74179055-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766083, "uuid": "71324938-fb02-4303-ab42-3a2b67132beb", "comment": "Malware payload", "value": "0543eeaa6f3a6520a6b608f3ccce925d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766083, "uuid": "3de3fa64-2815-4e38-be9d-f07109e1de5a", "comment": "Malware payload", "value": "aff1463c73b14f337f62021a3e232036daf9367d2fc04f461ffc81482a25321d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "81e84850-c97f-4c69-9e2b-5a4a9007e7fb", "value": "T1C4415C7421F50C332E206680B2771BA67B73DC5749A3658C38DE1A25BF8AB13A56B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "85eba20e-4336-4f4c-9e32-0658cf7635b3", "value": "48:cnRz9RCzyVnB6GpKg4r1+rRmlrys2oe89lwnpsR/38eYlrC:cRzGzcB6Vr1+enelzeKC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766083, "uuid": "274f4374-0e6c-4c24-8a08-944c15879dc4", "value": 2046, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "99c8d68a-a0e2-4d14-aed8-21896a101e50", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74325a01-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766084, "uuid": "ad07f643-3ed5-49bd-9e2e-f6eaa6ea72a4", "comment": "Malware payload", "value": "947d5f6b7a9616a3ac243432ece7ea4a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766084, "uuid": "89f89fc2-fe4e-4b0e-9946-500826566439", "comment": "Malware payload", "value": "a89ea3b0e532d325f9e35d31b32f70fd3133b56e9bd9d5fc045b170df320b4b7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766084, "uuid": "22a17fd2-04aa-4b0f-8108-7cdc9bb485f3", "value": "T12C42683720F08B32D7D011C9A3A21A614F72975B456724B5F4FE6729AF2DA0374EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766084, "uuid": "e9eaf146-fbe9-4e97-bf85-3fa0d62fc91a", "value": "192:cCuaC4hvZ5mZRcKNpivNbVWTxI1vgMrxl+XA:I4hvZ5mZRcKNpivNb8TxI/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766084, "uuid": "6c413cda-2dac-438d-9815-f6f8258ac695", "value": 12981, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766084, "uuid": "8597cebd-3b2d-4c19-b3b3-20155be8652a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "743345ab-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766084, "uuid": "0656c13f-0bfb-47b7-8045-e8b9c47dc94c", "comment": "Malware payload", "value": "4a7e150e2c84a65b42c88f04a8dd2c41", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766084, "uuid": "c87d343c-b605-4b7d-acfd-93762e0a3dc6", "comment": "Malware payload", "value": "7f6e05125b4fa5cea9312bf9af6c4355055ad8915c458bab51c34f56ffd371e2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766084, "uuid": "85aed532-3b3d-429a-b316-b6ea7366e05d", "value": "T13BC1077025F189332A24AB80B3372B96ABB6D94345E7218C36DD2D265F87B11B0FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766084, "uuid": "a1ccce3f-8e01-47f3-ad66-5bdb646eb34b", "value": "96:cLu3k0B6UqrZ+a9H9MM9gIB9IBqIBSIBLIBaIB8Iy+:cLu0g6l9VNJumdD0R3+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766084, "uuid": "d71e8730-f7ae-472e-85e1-2cff256fd9cc", "value": 5784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766084, "uuid": "6d076abe-529a-422b-8c4c-42b33bbf4de0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7464edc8-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766084, "uuid": "811e5fbe-4b44-48ad-97ee-ca3d6d8d4bc1", "comment": "Malware payload", "value": "04431edc33d0e7e3c23a732ba41955ce", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766084, "uuid": "39758e5f-2374-4b05-b897-00c6bfd01943", "comment": "Malware payload", "value": "603476f2c4e60c2f5f3a80f67e45d3620e8c86e710f4fd54de236abb67cc6fdb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766084, "uuid": "95e6aed0-2bf9-41f2-8d39-d676ab52ab47", "value": "T1EF61EB7025F08D332D20AA80B3372B95ABB7D95345E7218C35DE2D266F97B12A0EF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766084, "uuid": "21494d01-a973-4c76-a284-57d9768597c4", "value": "48:chRu9RcnB6gfCzyMc/mXJIrlr8wJIrlrimJIrlrE7Palr+09DlrM4gOPl/J:cLu6B6pzqgIBPIBTIBAIJvpJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766084, "uuid": "6ce7cc41-8476-4e55-b482-c473c517fc02", "value": 3334, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766084, "uuid": "832155ff-121b-45ab-aa7d-59d6418a25e3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74971ad9-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766084, "uuid": "c81baacb-66b4-44d5-bef5-f83489b23ee9", "comment": "Malware payload", "value": "9ae8061903719707c4a861261aff2244", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766084, "uuid": "99e5c18c-48f2-43d9-99f8-f0dab665b452", "comment": "Malware payload", "value": "9da888cb59880f6cf90f2574c56076ae3993a81a8d9f6ee9442131c42a048d5e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766084, "uuid": "fe44e97a-3491-49bf-a7d5-c68d54622204", "value": "T1C4B137B024F14C773E651545B33767E1BB77AC5305A36388348E1E26AF8AB03B9AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766084, "uuid": "b1f737ec-bbec-46bb-acfd-944337dd794a", "value": "48:cnRu9+7nB6FWgzlrAW6wlrdWgzlroW+HllrIWmzlrqWzlr5tzlrPtDlritDlrTtV:cRuSB6lZ8ytZAHXoZphnEjFnHd7b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766084, "uuid": "8c987046-4af6-4cdc-b9e1-f3ec3071a3ea", "value": 5524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766084, "uuid": "d3d74495-9864-4d15-822a-941caac931fc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7787dea4-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766089, "uuid": "d6ab613b-4309-4571-b6f3-a24406df680e", "comment": "Malware payload", "value": "775f1321dec670d4417c741d4de69965", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766089, "uuid": "3543f8df-8c9c-4bde-8e06-a5fd03eb0562", "comment": "Malware payload", "value": "104fa416d9ce6ba2902d3611c6d6f15d4b912e26f672218d83c2852e87de70d5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766089, "uuid": "d0ddfa8e-d40f-4407-b67c-044b18a8bbe5", "value": "T1E2315D7431F218732A615680B3331B667F72DC4749E3218C35DE2E29AF97F12B5AB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766089, "uuid": "66e5eb42-1bc5-4400-8a7a-6531abd89326", "value": "24:csnRUR8fAR25Wt09HHIuCzCRpYdZedSXGL/H/+HrJZwlDHESkZ2sg9lDHRkeN:csRu9RL4nB6gdSXc/mHrJilr8Z279lrF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766089, "uuid": "8c9ff8a2-5428-4379-b978-2770fdb8e90c", "value": 1870, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766089, "uuid": "246a2d52-1f21-4fc8-aa82-b0f13a64ed20", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78cb5e67-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766091, "uuid": "d744b641-716a-4732-b567-fe246cd39908", "comment": "Malware payload", "value": "6a069188ab1b255cf84d37a16b4e8133", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766091, "uuid": "bf8a9fdc-332b-4082-9ad1-c7000d8a3b96", "comment": "Malware payload", "value": "ef60a31fe250518f1872643afce029ba147b7998b2b26bd69dcf3d9d8b8a3413", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766091, "uuid": "06f1506d-c28c-442d-b9d0-a109432ba8ef", "value": "T1A531AEB411F1A9332A1466C4B3331B54BB72D8470AA31ACC78EF99746F87F06B17E0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766091, "uuid": "81b6ed04-648f-4513-abce-d2aaaa8119ba", "value": "24:cnnRUR8fA+W5aS/FFwFg/FF+WpJ9HHIuCzCRpYdZKZMsSipqlc9HH/qddSipqlcC:cnRu9+b0IYTnB6sCslpqlwnyPlpqlwns", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766091, "uuid": "bd91c7f7-b637-47c9-ab13-80508d19b836", "value": 1737, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766091, "uuid": "0499a0a3-48cc-4b0d-b8ac-32a69127b479", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79296109-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766092, "uuid": "b8090b23-0c7b-4d75-a8c7-6a90dd97d352", "comment": "Malware payload", "value": "72b48b1633d883831bfd9c89e8c3470d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766092, "uuid": "f00e0d08-38c5-4683-b7da-631e4a50401e", "comment": "Malware payload", "value": "f1580170e6372cb9165f54aae6bcb16f054eac1668d2aad141622edbc714d1e0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766092, "uuid": "ad24aa32-2c08-4125-98a4-cf4bb816585e", "value": "T18C523B7434F04C732E206580F37727E2BBB6D85349A3258835DE2E35AF8AB52B5BE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766092, "uuid": "576b6850-7e5f-4647-a1ff-6c8c2a813eb4", "value": "192:cRuF67DFO9Qw9UR6oj4p6p07g4dIgovsEkX51Xr8I9TaWES2rNX4ierJ3eZ:s/phI1YWc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766092, "uuid": "b0c5e47e-262b-4239-951e-4deda5c059b3", "value": 13258, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766092, "uuid": "3952a3c5-a97e-4d4c-bdce-38d448d7c12d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "795d62db-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766092, "uuid": "a3cea115-6781-4817-898f-9b37f79fd6eb", "comment": "Malware payload", "value": "0c91d447ac915e414946a3e9f9e895bd", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766092, "uuid": "8aa292db-e464-40e8-9278-e11b1c3e71e2", "comment": "Malware payload", "value": "5c8c34511eb2806db94437b7155253fa7503422da3829f3f3a9391f6afbd8684", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766092, "uuid": "b0fb2141-e1ab-42c7-b88d-95deacd02a3d", "value": "T14732667B21F08B32D7D410C963B61A614E72A70B496614B9F4FE5739AF2DA0370E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766092, "uuid": "4ba38915-e00d-4926-8177-1d753a1358fa", "value": "96:cCuolB6csht+O+v1fsn+h4+tIiKkC1ymysuKNpUj4waYvjKlWXaEXHArCAr8ywiW:cCua6p4hvZ5mN9oKNpivAwRt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766092, "uuid": "992d3f8f-ad4c-411e-ab45-38159a829027", "value": 11972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766092, "uuid": "def270cd-7bae-444c-9188-688c417677ce", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a069d2f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766093, "uuid": "cfb880da-7180-4156-a619-b44850c8aa6b", "comment": "Malware payload", "value": "e78a30d7116be037595af2f8ed55a0bd", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766093, "uuid": "68d14a2f-20b9-41b3-88b9-a22176e850b0", "comment": "Malware payload", "value": "446831822fe187cd563a14a51f3dd38ae79381d3b90084b803dc4caba37383f0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766093, "uuid": "145a5f4f-bc88-45fa-b12e-44f032d84838", "value": "T19B12453B21F08732D3C450D953A65A614E72A70B492614B5F4FEA33AAF2C90730E7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766093, "uuid": "cb10716f-a2fb-4a21-b19c-6e7a827a7969", "value": "96:cCu6sht+O+v1fsn+h4+tIiKqC1yOysuKNpUj4waYvjxHInys:cCu/4hvZ5mrFoKNpivdq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766093, "uuid": "3e69265e-c425-44ae-a45e-44342ff4662e", "value": 9550, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766093, "uuid": "b3d21e10-aa0c-4a75-abc4-de88fd485c23", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a070cd9-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766093, "uuid": "b4719b94-7533-4db1-8bba-616ceaed94e3", "comment": "Malware payload", "value": "6c25ec8885c02a722d6c180f83aa5511", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766093, "uuid": "120ea8dc-f4ff-49ec-a278-f6fe001b181f", "comment": "Malware payload", "value": "735daead54ea93f00e40b9ed7c168cdfbfe7a0cf16c622d27194e9d821baddf5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766093, "uuid": "346663b1-29e7-48cd-ba8c-75118a0ef71a", "value": "T1D7615C7011F00C736E301984F3772BA6AB77E8574997218C349E1E396F87F42A5AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766093, "uuid": "f7abdaf1-3b3c-4a78-8103-51ff706d00b6", "value": "48:csRu9+J9nB6gHrJilrmAE69lr8z6E69lriFE69lrElEHlEzl/+QxZWkol/w:cCuIB66Si6fA6fv6fiEFEl5Arw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766093, "uuid": "39945956-f9a8-4c3a-b0d5-018dc7f31f4d", "value": 3297, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766093, "uuid": "8da87ded-e6ed-4a3b-9741-843f8b00a265", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a8c0cdb-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766094, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766094, "uuid": "fb4ffa4e-1e80-4563-b15a-600575026020", "comment": "Malware payload", "value": "7b3ecd466fbd66f0624acb84721e5f04", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766094, "uuid": "7d587e26-96a0-42f7-8b5d-797a19326545", "comment": "Malware payload", "value": "2cae7d56c3063a8d27c5a3b5792cca771560ee844f82da521c49bb64c88252f0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766094, "uuid": "523692b9-8d84-4aec-a92d-3892398ec45f", "value": "T1B6E1C57121F14C336D605984B3772BA6ABB6D95389E3218C35DE2E356F96F02B0BF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766094, "uuid": "f6f5c9b0-b362-4440-b962-be53cd6f29f6", "value": "96:cCu7B6wNEOSwxkEgUEKEVqEorlrypEpjpPFsgX:cCul6axvhD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766094, "uuid": "4bc6ae72-2c5f-49bd-8a97-b51d7c6c6fe4", "value": 7016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766094, "uuid": "a02f2283-13c3-469d-9f68-ee59a7b000b0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a9de814-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766094, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766094, "uuid": "b536a181-07c4-4735-a9e2-e9e8433ea2c2", "comment": "Malware payload", "value": "f0ef83d20e729fd589b6747c7deed0f7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766094, "uuid": "779c2e18-7f9a-46d6-a1b6-80b28c40fa20", "comment": "Malware payload", "value": "b2ea28f14feaf432bf830399cf98469708992ff025503f67053d561cd20c2bf6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766094, "uuid": "c81d9271-1d82-46e8-8d41-35f7f6b1c037", "value": "T1AF626B7621F08A335B9465C4A33717915FB2A61744A720E8F4FE1E359F5AB03B0FBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766094, "uuid": "452055de-9ad4-4b97-96b9-293bb611ff6a", "value": "192:cCu/K6nC4hvZ5mzj7V7jiDDDM79E44+Tt:+C4hvZ5mzjB7joDg79E4J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766094, "uuid": "f14b44e2-8b97-4421-914d-82d587371f2d", "value": 14652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766094, "uuid": "edacad8b-ba7c-43cf-871e-18ca49d24e20", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7aa07fb6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766094, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766094, "uuid": "f6c226a8-4231-41fb-a96d-414e04948bce", "comment": "Malware payload", "value": "fc6a891b25b8d75be65cf6be9c027ca4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766094, "uuid": "88ce490f-0589-4ad9-b469-a9d961f0665a", "comment": "Malware payload", "value": "a3f39650c54aa6305dd65562373a5d3c11b4cec4e76305a6997dfc89ddd3d554", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766094, "uuid": "c9e15546-d83e-4763-89e5-afa300cad25d", "value": "T1DB32927125F20C333A705984B2772BA2AB76D95385E7318C35DE2E266F86F02B1AB5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766094, "uuid": "fbfcb066-af7c-46e3-b71d-531c601274df", "value": "96:cRu/B6wNc2XJRxG22eeFwx4xrsVYAtgmS6SuSFQg6bMoo:cRuJ6MLf9o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766094, "uuid": "38e4b79c-f1db-4d4b-b612-d70e40248990", "value": 11084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766094, "uuid": "b47d8318-cef8-4d98-b32f-a1ffaed5254f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b941728-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766096, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766096, "uuid": "2fff3ca2-13a5-48b0-8f01-89b262a8b7e3", "comment": "Malware payload", "value": "3eba703fe107671f189222336603e466", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766096, "uuid": "bce73925-deee-4edc-bbd7-5b3dbb921460", "comment": "Malware payload", "value": "f3b3ee9df1b5ae1e3f08908e6c55f87a5f9e2ecd357e5e6fb577ac395cdb96e1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766096, "uuid": "8326241a-37a5-4adf-9893-d6aca4663efa", "value": "T137F1033B21F08B31D7C021C9526656664E72A34B956A18B8F4BF573ADF2DA0370E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766096, "uuid": "f3f50aea-95d3-43c4-852a-5bfd4f79136f", "value": "96:cCuO7sht+O+v1fsn+h4+tIicqbA/GsG66+p1pHpmqb:cCuOC4hvZ5mzjN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766096, "uuid": "85dd48a6-31bc-47fa-81a9-67be1f1e4590", "value": 7990, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766096, "uuid": "c64f8e73-e4c5-4fa8-a9d5-cf85987bdf17", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7be09eb5-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766097, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766097, "uuid": "18e89a7e-a5a6-4b21-8b2a-cbf8141e54e1", "comment": "Malware payload", "value": "dd1f5bcba7fcabd8b861c2fb4f6c9934", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766097, "uuid": "161a0202-f854-40ca-8c85-5f70fb0c6f70", "comment": "Malware payload", "value": "34168c7c9b7971f46f884dec30c84bbcc8492728139e4ca95047bfdd6c8982a7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766097, "uuid": "00adb08f-2987-48f6-88fe-f212538ecaed", "value": "T12991E37025F08D732E25AA80B3372BA6ABB6951345E732CC35CD2D265F87B12A0FF5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766097, "uuid": "e9066922-8780-44f9-ac4d-bb99d1e9ef25", "value": "48:cniRxuGRys0Uh7lwnEUpElrm9pElr8PspElriGpElrEapElr+MpElrMPJIrlriZ9:cWu4FS7+C+7+n+d+p+OIBcP7IBQgC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766097, "uuid": "f9c31cff-b99b-44dd-8f27-9fef8b9295a2", "value": 4584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766097, "uuid": "cca0e8fb-c966-4a05-ac0e-ecbfef36d638", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7be13a88-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766097, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766097, "uuid": "f8a2e5df-b568-48f8-9d04-c670d48e04e9", "comment": "Malware payload", "value": "d9bb6555644514bfac11aa04a57a6b9d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766097, "uuid": "c75d4b6b-bb39-4223-9642-78f831327837", "comment": "Malware payload", "value": "99b150d5f7b224188266648f2f0756b52867e44ccf94ac4b2f9385554bb157f6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766097, "uuid": "3f8faa74-182b-4062-8f71-f8ed17525be6", "value": "T1E0E1D6F125F008736E209984F2773BA5AF76A8174997238C349E1E3A5F87B43B5AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766097, "uuid": "b65f7cf9-9f78-4ec4-864d-37d4cd40905d", "value": "96:cLu7B6MjlcCKbpi6fL6fL6fh6fI6fBEAA8AADAAZAAs:cLul6VhGB32", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766097, "uuid": "72265dda-1df9-4e8a-a363-483bd0098dce", "value": 7259, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766097, "uuid": "666075a5-174d-4c57-8f78-111db86e16ad", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c8e342b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766098, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766098, "uuid": "91f777e0-744d-409d-94b3-30afd38431a7", "comment": "Malware payload", "value": "6880564dc96593b1192cc3201c4b4af5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766098, "uuid": "dc123e99-038e-4d72-8ca1-6c4a95baeba6", "comment": "Malware payload", "value": "cd41362009cd7c72f7f4d8b8100da2dda244fda85406fee662c16a9814927e8b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766098, "uuid": "59982620-1a02-4d30-a314-9bc27a7811a7", "value": "T174829D3621F04A339B9015C8B3771BA54F76A61B456720B8F4BE1B359F1AB43B0EB7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766098, "uuid": "62b2e7a5-bddc-4c30-9efe-03b1638382a6", "value": "96:cCuVlB6csht+O+v1fsn+h4+tIiKqCTyOysuKNpUj4waYvjnWa3ImolVs76fqV6fs:cCud6p4hvZ5m5FoKNpiv37vMM0xj+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766098, "uuid": "ee04bf18-90ee-4fe6-87f0-b94a40beb8da", "value": 17654, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766098, "uuid": "710f6045-0a4d-4d17-b694-7f2ce156464b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d5ea5cf-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766099, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766099, "uuid": "69c2ca55-8785-4021-937d-2c68b6a7b90b", "comment": "Malware payload", "value": "1bc03a6a3246eaf855146bc6d4545f0c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766099, "uuid": "76c51154-30dd-4893-895c-35e0421681c1", "comment": "Malware payload", "value": "e65db1814851599f059eda0a30698708015321f2f75b105474f5a52ac42cec03", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766099, "uuid": "149561d8-a5a3-49f0-bcde-27c4d3517fdb", "value": "T1A752483721F08B3297D055C4A2771BA14F72A70B456714B8F4BE5A369F2DA0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766099, "uuid": "70c451d4-8611-4b1c-ac02-bd1143f4ec12", "value": "96:cCuGB6n7sht+O+v1fsn+h4+tIicqbA/GsGCuKNppjrwaV+I+j+3+FIBmIBGIBXgl:cCuq6nC4hvZ5mzjqKNpHPQsmJ1X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766099, "uuid": "9317f351-1f4e-4c7b-b975-8d2e4f33951e", "value": 13433, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766099, "uuid": "a912a995-8816-457e-b882-ce0e05ad24a7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d5f02c4-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766099, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766099, "uuid": "0ed1ce53-fcd7-4cf4-94eb-d3da9f3a6e9a", "comment": "Malware payload", "value": "f7b77c58137d7ee08f0b857ca2ddcfba", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766099, "uuid": "a49adf79-7ce6-4f55-9c4c-262f99797ba7", "comment": "Malware payload", "value": "09173dc4aeefe28202f860e7fe9ac283f23522907c96a8cca84a87fd2d7f52fc", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766099, "uuid": "bbd75cac-7e53-4b1c-a995-b330f238f886", "value": "T14C91C77435F14C732E245580F3772BA5ABB7D84349E3318C35DE2E296F86B02A5AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766099, "uuid": "37c79e6d-3898-45be-ba2a-2ec12ab903e9", "value": "48:cnRu9+19nB6g3ijlwnmQpklwn80pklwni8pklwnEoC5pklwn+i+1l3MT+1l3idT1:cRu6B67sdfpZC1CbTbhblobF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766099, "uuid": "09b84eca-054d-48c0-bc64-0e54caf033fc", "value": 4281, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766099, "uuid": "0975bbba-064d-4ff2-b470-4e636bb98226", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82eb9c03-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766108, "uuid": "b779c6c0-0bb5-489d-a6af-9817cad4244c", "comment": "Malware payload", "value": "b30df3a36d60aa1959d949994854bb0f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766108, "uuid": "606f7f0d-015b-40af-96b2-e5723aa90e64", "comment": "Malware payload", "value": "92ad11701090b0be7829a004cf5f84fb3da6965621db6a33d766d5bba3234065", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766108, "uuid": "01ebb920-ffb2-4484-9440-58dfb15e9c1e", "value": "T10C5193B025F04C732E611940F27727A96BB2A85745A3218C39DE1F356F96B02A5FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766108, "uuid": "e5762a3b-7abe-4725-8f11-8d4340e831fd", "value": "48:cniRxuGRys01lwnE5Vlrm3Ucwn8a4dlwnibLU/k+l/ECU/k+l/b:cWu4lI3fYg8mu8mb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766108, "uuid": "05474019-ce91-4a4b-b67c-9497a0036293", "value": 2613, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766108, "uuid": "c1f5b677-b2c1-4e85-ae2f-5e5305f037e6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82ebb396-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766108, "uuid": "f554dff2-bfdd-4046-ad9e-9b1f54ded28e", "comment": "Malware payload", "value": "6ee685feb8fbebf926e0fe0acc274fca", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766108, "uuid": "bb356719-4777-4861-a132-6f5b73a6685a", "comment": "Malware payload", "value": "6a6554bb507e5cd0deff2899776a3848d202611d9bcd2d01f0430c8b96555df8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766108, "uuid": "faf25550-8224-40f8-a7a5-b8fc70c8ace2", "value": "T19B22587B21F08732D3D450C953A60E614E72AB4B996618B5F4BE9336AF2C90331D7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766108, "uuid": "8c093dbb-6508-48a6-95ca-0e8622b1f406", "value": "192:cCu7e1OJi1OyPsN8GsNDM6p4hvZ5m5FoKNpivW:ye1OJi1OyPsN8GsND3p4hvZ5m5FoKNpV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766108, "uuid": "f7aa709f-43e6-46f0-9e6f-b8bb78fe5235", "value": 10596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766108, "uuid": "b3219c3b-8101-44fe-a791-804e304dea67", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82fc5c41-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766108, "uuid": "e1424e8a-eea5-487e-87e8-bf665d516587", "comment": "Malware payload", "value": "6b0088d089632382d9cfa893a80a3fbd", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766108, "uuid": "c540c8eb-1191-4674-bb4b-71d06d531bfb", "comment": "Malware payload", "value": "df324fc70c37ddefcdb74feb66c68a42ece374505eff57e8f2bc49a628bef7b1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766108, "uuid": "4483a795-1e20-4447-a387-b58b32a895e5", "value": "T11211E3B001F1086326102680B2372F46BBB2EC474993168C38EE6A296F87F13A19B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766108, "uuid": "8a62660d-4507-464f-8f14-0d080ed34864", "value": "24:cnnRUR8fA+25ob9HHIuCzCRpYdZeI3fdGL/HUeN:cnRu9+HnB6gI3fdc/X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766108, "uuid": "7c8b03e1-5450-4bad-afd3-c2a1166e0ab7", "value": 1017, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766108, "uuid": "e41cc028-dded-469e-af49-a18cda4b7f76", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82ff9edf-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766108, "uuid": "3e013b11-8ad4-48be-b31e-25f4aba0d9ce", "comment": "Malware payload", "value": "538d90c33501ded274678fdcd0646a25", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766108, "uuid": "b029263a-f3f9-4fd4-a439-fbc2c183afeb", "comment": "Malware payload", "value": "bf66395217e33389cfee68217244c9361f41706eeba8cb6ba40cf235708506a0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766108, "uuid": "e8aac2ca-560d-46a0-bccb-cde5ca08b67f", "value": "T16B32342B21F08B71D3C460D952A65AA14E72A70B992614F5F4BF933AAF2C90731D3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766108, "uuid": "aa712cea-4c62-4619-9574-6c664fc5a245", "value": "96:cCuYJB67sht+O+v1fsn+h4+tIiKVC1ymyyQzuKNpUj4waYvjNioVPX:cCuY76C4hvZ5mu9TVKNpivBl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766108, "uuid": "52fa4493-f7c3-482f-9d5b-0c576dd14a80", "value": 10942, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766108, "uuid": "1320404e-f7df-482f-b06b-aaa516a7d403", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8307df45-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "8af7bd58-d646-41cf-b206-2a54c55c2b80", "comment": "Malware payload", "value": "f26adc1015ed9b4c771461f1b69bbf1d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "c0c3d795-56d9-4b6f-b527-9b2c3db63ae0", "comment": "Malware payload", "value": "33288877b33efe7b5f8abe6376e63c57a737d131fcf1111bb99b7fdb39756a26", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "837e8811-4d95-418d-83fc-baac582947b1", "value": "T13A726A3721F08B33A69065C4A3772BA15F72D60745A720B8F5FE1A269F59B0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "ead17178-92d6-47c6-811f-6aa5c2a41535", "value": "96:cCumlB6csht+O+v1fsn+h4+tIiKqC1yOysuKNpUj4waYvjv4xJ5iu+SEgpIBeIBc:cCug6p4hvZ5mrFoKNpivfvaRo+XwQju0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766109, "uuid": "fd723151-63ce-4dc1-977b-120b37036f18", "value": 17163, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "9752a931-38b7-484d-983e-dcea8e0e2923", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8308130d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "d4b410b3-ab4f-445e-8c80-8e773aa1b48c", "comment": "Malware payload", "value": "e95d6050431b86c0639fd10b0f5a2457", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "d8d4f631-375e-4c93-a7b0-400e72b5a989", "comment": "Malware payload", "value": "a2ec21c77fc0ad318efadc8a5accd1d0ed42ccc46b02a15f12a75b11c2ab8aae", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "8605dbde-36e6-4473-b4e7-a57be72d7d7a", "value": "T17562563721F04B3297D415C8A3671BA54F76A60B456724B8F4BE5B399F1DA0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "10abc8c6-b4fc-431a-9d10-3cf6c044fe88", "value": "96:cCuolB6Lsht+O+v1fsn+h4+tIiKkC1ymyRyzuKNpUj4waYvjJlVv38Zo8zJwD6fW:cCua6S4hvZ5mN9i/KNpiv2ZkvsMQ+Vd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766109, "uuid": "0a60db07-661f-48da-b807-6526c7f814ac", "value": 15721, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "61556d9a-609f-4f25-894f-371b9b1a7490", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83089b1b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "ac255460-c0b5-41ca-8fec-1a4430ad1535", "comment": "Malware payload", "value": "444ebe8705441523c03aa1fadf1e37bf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "9e2e4f6b-da1c-4631-9193-f040f61902b3", "comment": "Malware payload", "value": "75498e24ceeb90a4d200da0418a6335013478493ef0aa53be79ec729fb98a04e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "9334c0f2-b0e0-443b-a90d-6832128534f6", "value": "T1CF32B67125F148333A30AA40B3772BA69BB6D95389E7318C35CD1E365F86F12B1BE5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "1ffbe871-1544-47a8-8ca0-4722f9188c85", "value": "192:cLu568e1OJi1Oxe1OJi1OXj94SCca+N3P7:w8e1OJi1Oxe1OJi1OXj94SCcrN3P7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766109, "uuid": "a86b0086-0ed2-4bf1-b7f2-38cbc0a027e9", "value": 11712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "e8ca18b8-7703-4828-9fbe-6f9fb633dbca", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8314dfc5-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "e2d307f3-d184-4dc1-98f8-81ed9dc81dfc", "comment": "Malware payload", "value": "82f79b5838058953c8206dfe7169a83d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "9e42415b-77f9-4a3c-95b1-c8c6e256d2f5", "comment": "Malware payload", "value": "13f165eefedc909b31fb5aea55037a34c2219b4e41e7c576b3e59b6a3f546a2e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "3c8a97c3-2379-4da1-97cd-b8ce3556ad1a", "value": "T108310AB121F218331251954073321FD6FFB1DCD39DD26E4CB49D1B362B65A03E256D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "8bd907ed-99c1-4d7a-9cad-dbb5c9f9e9fb", "value": "48:csRu9Ri764l4Ui4n4U34f7V4Ui4n4UNpZnjsrQnjwanB6g51lwnX:cCuA64l474n4U34jV474n4UDZnjsMnjQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766109, "uuid": "fbec2306-e414-49d9-8973-ce8335462bfc", "value": 1544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "899e5364-0b54-4523-89e2-9858b71e5d74", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "831bd4e3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "cb018597-b3e1-427f-93b5-02eb30f7490e", "comment": "Malware payload", "value": "2b08599e65fd0895b805569fcf3421d4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "630ea543-ec2e-4472-8587-27afb93bb8d9", "comment": "Malware payload", "value": "1616abe23d26930b436cc3b69145d95050688364d956ddf56b0f27063ed6ab85", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "92a887f4-40bb-48e5-837b-52df120a0c66", "value": "T1EF515D7420F15C732E186540B2772795BF73DE5345A322CC35DE2F29AF9AB03A1AB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "bade712d-8592-427d-943e-11bc67ebf37c", "value": "48:chRu9RUhnB6gO/iPdFHPwWYcdl/m037/8ZalribgOPl/C:cLuYVB65ioW57QpC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766109, "uuid": "162bb32f-d3d5-4984-a1b5-dfce342ef07d", "value": 2651, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "9d6d5b8b-0fb2-4048-a69c-de8ded170ccd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "832753d8-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "efa43028-a560-421f-8a95-7cab6801cc44", "comment": "Malware payload", "value": "96f1b7e04b9963d36072fcc9a177ca70", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "623ffb4e-950c-4478-a445-ff7e88cc73fa", "comment": "Malware payload", "value": "f1569fcf27fd0fa357465ff58521942e68e54faa667accc7669da48dd9a6144d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "a3ca0d21-bfea-45fa-b4b3-e45aa7ce1952", "value": "T10502057025F08D732E20AA40F2372BA5ABB7A85749A7318C35CE1D265F97B42B0FE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "9f654dae-951a-40a8-9226-20b087cf1cc1", "value": "96:cLuP3B67IBZIBuIBvMIBoItIiIIf6f06fOn6fg6fx6fp6fgHfZ8U2:cLu567q9vD8nhVU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766109, "uuid": "bf674b9d-9d0a-4032-bffa-2792be98f24b", "value": 8601, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "e8f0bb27-37e0-417e-b505-cc0336707d4f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "833bda00-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "b21d977f-9822-4a00-acba-e51647a621f8", "comment": "Malware payload", "value": "61215f2e85bfc72a02737cf724f5f210", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "9628b538-455e-4302-bd9d-62f948b42fa1", "comment": "Malware payload", "value": "0fd7bde011092256cc619c6c4aa6c473c26c85d8f7137a24080f2bf125322c84", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "54a49d86-4caf-4a47-9db7-a4056e96e4f5", "value": "T1A722937035F14C732E256980F37727A66BB6A85349E3318C35DE1E29AF87B02A5BF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "e5c00bd1-bacb-4981-885d-8b5e404af61b", "value": "96:cRu4B6sVOEvQU5QAeoIeYm2hZBsgUqDF56dmbjlFlAAb:cRuk6m32pd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766109, "uuid": "dfe5c4de-8240-4680-af11-c10191fda632", "value": 10378, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "e96145dc-f76b-43d2-9e4c-7664e65e82e6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "833d1c57-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "ad71c33a-2783-4992-8e35-953835c6a0aa", "comment": "Malware payload", "value": "67cd1e669c4197bd02cbb9faa020337f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "df5ab67e-fbdd-4052-a0f1-c8cf5639afe9", "comment": "Malware payload", "value": "d4127b30b3ecc0707ec37128429e730d5a28c8a9cf90964c38682628c9cb1619", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "3e7bbc7a-ea65-4239-a3ff-069bc4337004", "value": "T12042663B21F08B3293C065C962771B614F72970B456714B8F4FE6A269F2DA0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "d0139ed2-9578-40cf-b2f9-53e17dfbe90c", "value": "96:c5uUk0B6msht+O+v1fsn+h4+tIiKkC1ymysuKNpUj4waYvjOBQIB4IB/IBbIB97g:c5uDg6L4hvZ5mN9oKNpiv6iTAoo7OP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766109, "uuid": "a814ecef-01b8-41df-89a7-ecc8b2d995c9", "value": 12545, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "6a8e1fc9-88ec-49c3-ad17-49dbf574c273", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8352b0c7-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "107c01fa-bd48-4c8b-835d-25259638f1c5", "comment": "Malware payload", "value": "af9abb16d9589d6ff4be50ace706db22", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "10cef023-bd8c-42b8-8806-55f983a93964", "comment": "Malware payload", "value": "145cf8ef440897fd75f3c65bff1eda64ad5d80d01998dd2be8261e33178608ee", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "c4887cc1-ff65-4479-9fc1-6317b536683d", "value": "T1B3A1C3B424F10C332E24A980F2772B95ABB7D95345A372CC75DE1E355F8AB02B5AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "93c24598-9e9c-4732-ac41-cffe11a61bdf", "value": "48:cnR29RyMRnB6g5/iPdFHPwWYclwngralri9alrG9VlrG9Vlre9Vlre9VlrDsIVlJ:cR2JB6yioVFf00MMAWpWg/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766109, "uuid": "b56a199b-6da4-4946-a5a9-5f24451af1d7", "value": 4731, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "3b5da1ee-67cf-4673-b866-9a863a007116", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83840227-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "538c7c58-9e3f-45e4-a726-2662cc478ead", "comment": "Malware payload", "value": "e3c8d3a5474d4e1e193b0e1772aab2fc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "fc516521-d95c-4866-a1fe-34cc96c10c3c", "comment": "Malware payload", "value": "cf3e850a0aeb66ac2cc121e102f448720dd69520aa3eeeefec0f020fcfcb8a79", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "3c9bd971-3cb6-4bf4-838c-a929ab9f3c0d", "value": "T14A52343721F14B32A7D054C8A2671B614F72D60B856720B9F4BE2636AF5DE0371EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "c6eb293e-b235-4451-80a4-5771c937b515", "value": "96:cCu4B6csht+O+v1fsn+h4+tIiKqC1yOysuKNpUj4waYvjmN0xOS+cBAAS12b:cCuk6p4hvZ5mrFoKNpiv7L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766109, "uuid": "b6fa93f9-6101-4733-82e5-ddc997f9ff08", "value": 13262, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "44b19c76-503a-4675-87fd-92cfda0f89e3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83948b36-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "f9053a64-9e1f-454d-9d0b-8f786951335f", "comment": "Malware payload", "value": "84bc6d1185a3199ead82c27f597cf895", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "57526544-9bbc-450c-835b-7f2161a591ac", "comment": "Malware payload", "value": "2455571f08d2abe396594ee7f6b5a6d2c4e69dc455a09ee0774f90aa6686faa2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "f45907e5-9e2b-4166-864d-32b2cd96f3cf", "value": "T14A516B7830F31C732E556580B27327A57F73DA5349A322CC35DE1E29AF9BB02A5AB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "ca1a1469-d9ae-4c7a-a698-9b5486d22e93", "value": "48:chRu9+BnB6gR/iPdFHPwWYclwnmZLlr8ZLlriZElrEZElrb:cLuWB6wioV8i35b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766109, "uuid": "a205a55a-4a82-49d1-95ca-c699bbe7fa0d", "value": 3078, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "590cc5e3-6d2f-4f86-b5a9-4dec1b40ef48", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83ce9e6b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766110, "uuid": "98b01787-9ee7-43fc-9bf3-e77be675a451", "comment": "Malware payload", "value": "fc6777efe38727706cc33d49eb17496a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766110, "uuid": "96f7f372-8758-4d33-89a4-995c1ca0b7cc", "comment": "Malware payload", "value": "e4d107cbdb63034ac126cc7ae70962efde44074aea1b9a4cafa3c68ab2bc722b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766110, "uuid": "b82870d4-d6f4-433b-955c-b3b5a1ec7c49", "value": "T1106236B435F04C732D601941B2731BE6A7B3D49349A3759839DF1F31AF86712B8AE5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766110, "uuid": "ac4da244-3a7e-4916-aeb2-87423c24ad4c", "value": "96:cWu49lJVU1Ey1QH1H1VL1iliA1dkI1aW1Lgv1Xsm1hM1fnK41yn1QJK1ZLp1B/1a:cWuwLtIa45coY+/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766110, "uuid": "519da0bd-c5bf-4798-9fa5-4e8f10d102a2", "value": 15051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766110, "uuid": "76fece69-ddcd-45df-9c2e-055fb1b87d17", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84ba4e3c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766111, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766111, "uuid": "73e05d79-0787-4ea1-a03e-ca836635b386", "comment": "Malware payload", "value": "02acfab23750c44aea7b4513931ebecc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766111, "uuid": "95af4515-0591-4fc4-b5f0-09cc2e56b26e", "comment": "Malware payload", "value": "5bafaf6313b77eda8a32328f1a74ea7c7dc1e7092fa6455b904f471a735b5900", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766111, "uuid": "4dc54df5-819c-4c46-af0a-aae7b63d2f7a", "value": "T1EE31B6B021F148736A605580B3772F6AABF6DC47499361CC38DE5E396F83B42B1AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766111, "uuid": "6cbf8fab-4421-4a55-82d7-f2b9ebbe6c1f", "value": "24:cnnRUR8fAR25bm09HHIuCzCRpYdZe1KOujKujsBjl/H/+sCl/HESkkKl/HRkeN:cnRu9Rf4nB6g1KO/Tjl/msCl/8kKl/F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766111, "uuid": "9b21f998-0ca9-4707-950f-47e2a51460e4", "value": 1755, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766111, "uuid": "98cb9808-0d83-4c34-bd4e-eaddda0dbdab", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84ba558c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766111, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766111, "uuid": "55ec43f1-e7b2-4ea6-bc7e-f154ebbee93d", "comment": "Malware payload", "value": "1d8a495143372e26800c5d6d973225d8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766111, "uuid": "b8498a40-9ba3-458c-a0f6-011300193731", "comment": "Malware payload", "value": "1459e201b652f6c057e32b9e4f0589f666ffa0619aab2e223f7fb52dd682fc29", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766111, "uuid": "fda728a5-b68b-4301-9b7e-c2db64d2da6d", "value": "T1F701A47401F515132214669461739F057B32EC87596206CD38EFAA696F96F4762970", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766111, "uuid": "653c6066-0959-4a5b-b537-d7d0001d1e41", "value": "12:cHsuFy8RfMR8VNxOvGHfQx5GOeXXrKKLE1OdTX9A6HFmjRMmjUMmjRprMEYZ+KeN:cnnRUR8fA+W5gXrKKLX9HHIuCzCRpYdK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766111, "uuid": "2f2523c6-fb5f-4a24-90f0-8cd1add45c0e", "value": 688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766111, "uuid": "7d3a5842-f843-49f5-b1c8-a324fd48a0b0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85174994-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766112, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766112, "uuid": "027b310c-3fc3-4eb3-91b9-74d1019e1835", "comment": "Malware payload", "value": "2add38809663f83ac896d21bc187b7ca", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766112, "uuid": "d78d044e-8941-4556-b454-e741f191aba3", "comment": "Malware payload", "value": "fcb5267d8f9385352f2778d70fed6bd2e81959f34953d5c8536c3df96f9e41e8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766112, "uuid": "ee2f3dc7-712b-463b-8670-847f514fd19f", "value": "T13F22453B21F08B32D3C410D953A65E654E72A70F452614B5F4BEA33AAF2C90735E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766112, "uuid": "a08a8785-eb3c-4a37-bc18-fd1c43bc6392", "value": "96:cCu1B6csht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waHv6/wY1F:cCuH6p4hvZ5m5FG4j4HKNphvc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766112, "uuid": "dd81ddf9-ce85-4beb-b956-368bf77c9700", "value": 10354, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766112, "uuid": "ff4c3b0a-428e-43e1-948f-1224a8614eb6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "872df315-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766115, "uuid": "c8b41a7a-2063-4ca6-a444-d43b378c4bbf", "comment": "Malware payload", "value": "3f66c4be994e7670de6e0059ab39e650", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766115, "uuid": "026a718b-81d2-4c22-919d-c0e41ce6d76e", "comment": "Malware payload", "value": "f33f91e10ea49a8f059f2328f5f6ccf1ab47642bb56f276fd094dc604a75bb3c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766115, "uuid": "423b615b-7104-4b18-acbe-983e491bd382", "value": "T14422453B21F08732D3C050C953A65A614E72A70B492614B5F4BEA33AAF2D90771E7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766115, "uuid": "592ed669-d586-4502-9f18-712edfe0b67a", "value": "96:cCuYmB6csht+O+v1fsn+h4+tIiKkC1ymysuKNpUj4waYvj0zCZ1F:cCuYK6p4hvZ5mN9oKNpivl1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766115, "uuid": "0e13ec5c-5a89-45c2-af16-fbea424e76af", "value": 10060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766115, "uuid": "e0dc51d3-ebff-4663-86ff-c8ccc85e11f3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8730758b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766115, "uuid": "cad57bac-44a7-46fb-80c3-557327c76099", "comment": "Malware payload", "value": "91ae420d9c38c978095df850b5ac2f89", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766115, "uuid": "f970c1cb-642c-4ec0-b872-1bbe2741616c", "comment": "Malware payload", "value": "54e1e7b06176be06634d027f921b3fa3a57281f5905a5346ad12cf0c336f2242", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766115, "uuid": "a6e8de70-7cde-4a98-b3e4-7179b378b8ea", "value": "T13C511A7024F10C732A256540B6772B95AFB3EA53496323CC39DE1E6A6FC7B03A59F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766115, "uuid": "e09704be-0edd-484e-a7db-5a1ea52089ee", "value": "48:csRu9RG6B6gId/iPdFHPwWYccrmZZcr8MHcrivdcrEincrb:cCuy6B6v5ioP5UXSb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766115, "uuid": "3f9691a5-aee6-410d-b4e2-b12a3d3dbc52", "value": 2781, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766115, "uuid": "7320bc26-6188-43cf-aeed-08c10566c3e8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8774762e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766116, "uuid": "8a55fbbb-d43a-4f09-9e6e-7919dd75e2c4", "comment": "Malware payload", "value": "8cf588b798abac7028a4eea66ec4e03f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766116, "uuid": "ac74e30e-b0e5-4320-962b-9899fdbf9dad", "comment": "Malware payload", "value": "bd46906d64f2f7999dcf0e1f6620e27e53480cc6a4baf2770dcd4c67527c3246", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766116, "uuid": "b5b0a9b6-e5e9-4a00-86f3-7e2aa63833a5", "value": "T108226E7025F04C732E316580F3772BA6ABB7A85749A3318C35DE1E265F87B42A5BF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766116, "uuid": "210e9e47-3748-45e1-87d2-b14ffd89edd0", "value": "96:cRu4sjOUw5v+lkab1P14XsrGhtojq55+Whm6Q6fu6fX6fC2d0:cRuVWhh5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766116, "uuid": "17314350-18e4-4b3d-8f46-950dba70270d", "value": 10474, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766116, "uuid": "e7da6952-e2f8-4ad9-82d0-aacbde0a9af2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "889f4894-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766118, "uuid": "cb274edd-a379-4731-bc24-1fb70ff718a4", "comment": "Malware payload", "value": "21f345e20f0aa65c59ffafac3d30ed32", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766118, "uuid": "c73584c9-8fc5-4432-b8ea-7225af64c160", "comment": "Malware payload", "value": "4710fb8da39920cd3779757b27f94e651081357c7706a74b555603bfcda9ab06", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766118, "uuid": "ca455164-332a-40f2-99a7-9b3d916abf0c", "value": "T1CD22553B21F08B32D3C450C963A65A614EB2A70B452614B5F4FE632AAF2C90735E7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766118, "uuid": "63190d3b-c935-437c-b8a2-ccfce8f3f327", "value": "192:cCu34hvZ5m5FG4j4HKNpiv3ZsdjmK0CIDs:c4hvZ5m5FGGoKNpiv3ydjmK0CIDs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766118, "uuid": "28fa3e28-dc28-4b20-8637-b361873604c1", "value": 10588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766118, "uuid": "2dc88b97-496b-4330-b073-9926ce1a8688", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8924bafd-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766119, "uuid": "e1bdaa2d-b2f7-4620-bcbf-65090f912d3b", "comment": "Malware payload", "value": "dee6044dd453a324d99c0783ed586c5e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766119, "uuid": "1f879168-c89c-4067-9f7d-37d9979c1fab", "comment": "Malware payload", "value": "4e5a6aefaeaef421c8375bec8e6a5aba73173d8bbc94896f67e44a24c669a9b1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766119, "uuid": "b3258db8-68cf-4b77-aa19-1ea73a6687af", "value": "T1E051E7B124F2483326209540B3371F96DF72DDE39CD37E88B45D1B372BA5612A26BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766119, "uuid": "0f11129a-a510-4760-8b69-dc347cdb89f6", "value": "48:chRu9RUhPB6gjC764l4Ui4n4U34f7V4Ui4n4UNpZnjsrQnjw7lpmXRe7w474w4hU:cLuQFB6d64l474n4U34jV474n4UDZnjG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766119, "uuid": "35041f74-8501-4fb8-923c-3e6e084055f9", "value": 3067, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766119, "uuid": "98555e74-7a66-4f35-b864-d0a9eb300210", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89437123-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766119, "uuid": "c8009ad0-ff4b-4243-a814-e4536616e744", "comment": "Malware payload", "value": "63692cda1e4795440268c8e73b472820", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766119, "uuid": "b3e6b9f6-6250-4cb1-acda-3d58efbe1d39", "comment": "Malware payload", "value": "29adf8227d1d5af3c62c6045864c95d815b84deaefb20d60fc967c28a6405e64", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766119, "uuid": "4aa5f879-f4f6-468d-b4b7-598a277fa360", "value": "T12091E67020F04C336E645984B37727A6AB76D95399A3228C34DE1F396FC6B12A5BF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766119, "uuid": "5cb435ea-a234-49a8-ac0b-65fbd2a6bb30", "value": "48:chRu9Rp9nB6gvijlwnm+pkl/8kIpkl/ij/pklrE9dpklr+dxZWk7l/MdxZWk7l/r:cLu7B6hsk1tsY1AAAWAAU3AAX3AAIpF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766119, "uuid": "7d569416-923c-4adc-8f41-2ecf58932de1", "value": 4407, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766119, "uuid": "008a3a65-e65a-4858-a87e-95bf5176661c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a274468-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766120, "uuid": "828491bd-c5a8-4de5-b82e-355f08877f24", "comment": "Malware payload", "value": "70170b4aa18740d03b679963e8bdd04b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766120, "uuid": "e99bbdec-e53c-4c12-a6cc-00cce09f15d4", "comment": "Malware payload", "value": "0da95b4a63e5d59dde47c6d1f290089356e04b9145dd97cbb7d3d45eded8d366", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766120, "uuid": "08d263bb-2d05-45cc-a134-87c45d7599c9", "value": "T12221917490F25E73298C744466F317846F73CB17815213E876EE9FA64F8AA43626B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766120, "uuid": "ae1d5ce9-befb-4d2a-91b4-6e743062790d", "value": "24:cniRHRURCxO0tbmN2M1sLo/iPdFHjeef5uZW5FkXdflUlc9HHveN:cniRxuGRys0/iPdFHPwWYclwn+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766120, "uuid": "1393297a-7933-4e64-82c9-c4a223ff1924", "value": 1388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766120, "uuid": "923ddcc5-a660-4157-a709-ab3a62c2d368", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a54eb13-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766121, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766121, "uuid": "747dace0-2d51-4fcb-a364-ec6c8e731c88", "comment": "Malware payload", "value": "0379eaabf31aaf7f523ad692d6891ab5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766121, "uuid": "81a3ba92-3b83-44bb-b378-41fcfa08a9cc", "comment": "Malware payload", "value": "32c1bb1e5f829f1ca14254c848c90bb29d6120c6276757107fcfaaf059fda979", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766121, "uuid": "dcf6e897-ffa2-4986-b711-134c828c1d78", "value": "T12482497721F14A33A6E054C4B2771BA15F72D61345A720A8B4FE2A365F5AF0370EBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766121, "uuid": "108d34eb-e558-404b-a3ab-4843dcb9df45", "value": "96:cCu1k0B6msht+O+v1fsn+h4+tIiKkC1ymysuKNpUj4waYvj4cx+cafdYxYxTFfaL:cCuSg6L4hvZ5mN9oKNpiv6LHVtZg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766121, "uuid": "34fc3a2d-7893-4696-aa4b-46911344429a", "value": 18721, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766121, "uuid": "f3dd5e69-7a84-4625-955a-8fd8090a52c2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a60f0fd-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766121, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766121, "uuid": "91d7a668-bde6-483b-a304-a049097cc8f0", "comment": "Malware payload", "value": "81efb11e351ea94de661d47b5e72dc8e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766121, "uuid": "14ff0254-774a-400e-b793-b979ae70d7b9", "comment": "Malware payload", "value": "e14130094a158ffd604b6dfb5c01cebbcf8d9143d8a56fa5b9a8940e4171e131", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766121, "uuid": "583f1736-9edd-46f1-8a31-7a2e79f941cb", "value": "T11C31593440F11D632618A45062B32B817FB3DF535A5213DC39EF5FAA5F8AA03628B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766121, "uuid": "1592da20-4864-434e-b644-71f12f7298c2", "value": "24:csnRUR8fAR25wQ9HHIuCzCRpYdZeU/iPdFHjeef5uZW5FkXdflUGL/HUeN:csRu9RLsnB6gU/iPdFHPwWYcc/X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766121, "uuid": "992459b9-ca99-4909-ae60-3f697fbee972", "value": 1614, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766121, "uuid": "d16dc875-6253-447c-b4be-822252aac36b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8addf660-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766122, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766122, "uuid": "3e7d97a1-18cf-4b4c-bff0-0ac4731c14c4", "comment": "Malware payload", "value": "4c111e704823ba728a862603753ea086", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766122, "uuid": "76a96354-8d3a-4983-a99f-41feddc4e38a", "comment": "Malware payload", "value": "5351cc2dbd747fe8d3c90831b482aec71b34ab51568f521283a557db171c3171", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766122, "uuid": "94157cd7-81d3-4d15-8078-0f2d04b03d14", "value": "T1A2827B3721F08A33A69055C4B3772BA14F76961745A720B8F4FE1A265F5AB0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766122, "uuid": "57c3e3b4-a7c0-44d5-b539-8803ab9f48bf", "value": "384:a4hvZ5m5FGGoKNphveadu+qu0ITSSGEuNKHIz9:aUiVN7A1EuNKHIz9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766122, "uuid": "cddb571d-e4d3-4fe0-919c-d9474fad61cf", "value": 18088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766122, "uuid": "0c2c9adf-78fa-4847-bc2f-d34d1246734c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c465189-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766124, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766124, "uuid": "4f7d42f5-689a-427b-b0cb-46d8ebb2c704", "comment": "Malware payload", "value": "5b14d0b3f2e3629e5b8e0fa04c66a1cd", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766124, "uuid": "61870b16-482b-41d7-8cbb-6fdfdb893db1", "comment": "Malware payload", "value": "d8f74b998efbe802ac8ca9a3b66abe104ff01bd71d5e393b186844030ec01deb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766124, "uuid": "f3c061fd-ec15-44ce-8ce3-ad1cbbc1d13d", "value": "T137627A3721F04B339BD055C4A3771BA54FB6A61B456720B8F4FE1A259F1AA0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766124, "uuid": "33b85b5d-f59c-47e8-82e1-9316f07dd68f", "value": "96:cCuisht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waHv6mkQdG/NBr+E+C+OP:cCu34hvZ5m5FG4j4HKNphvUZ/lxuP+L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766124, "uuid": "cc9a4985-3c56-42eb-8adb-a6ac879fdd7d", "value": 15896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766124, "uuid": "e783704e-08c0-40df-abd6-2dc0c2587f76", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d6340b0-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766126, "uuid": "ce9e0e85-b4f8-461e-8ac0-a644b099bb02", "comment": "Malware payload", "value": "f9355e0ca1fcc3e305e6d53388b4ab66", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766126, "uuid": "ef2b1af7-d6e7-4463-a5d6-4927524e35a7", "comment": "Malware payload", "value": "1ef3f07316a9d6e1a0eb3e800cf700221dd2eb9e052ae7279e379babeb7c3669", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766126, "uuid": "18789447-a913-40f0-ac56-0eeb4259de6e", "value": "T1A2411B7011F18D332A21A680B3772B55AFB2ED4349A7618C35DE1D266F92B12A1EF0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766126, "uuid": "d2a35299-ad34-4e37-ad00-f4b52717fa94", "value": "48:chRu9Rp9nB6g+JIrlrm9JIrlr8qGlrAvn8:cLu7B6pIBmIBUe8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766126, "uuid": "a2e4ca6d-012f-47fc-bce7-bbcbdb3d8f78", "value": 1972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766126, "uuid": "ddfa58c4-38b6-4365-9b38-4f66abdbcdb5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8fe8c15a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766130, "uuid": "a503b520-a4f1-49a1-8920-3921b36364c5", "comment": "Malware payload", "value": "da9808c18c76faa4571265247fa3de8b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766130, "uuid": "637582ef-cd7f-468f-870e-7377d07d77cb", "comment": "Malware payload", "value": "397d65fd58bbca6a86d140274c18d037887999160e274ee8d469e003f73e0dd0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766130, "uuid": "7a8104b8-ce17-4ee8-8c9f-55515453be33", "value": "T1E91172B221B20C335651E544B3721BD6EE72EC93DCC27E48F46D073627B9503E229D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766130, "uuid": "43751a50-fb1e-4b51-b81e-3b3dfd511a73", "value": "24:chnRUR8fARVmpC764l4Ui4gi4UlV4f7V4Ui4gi4UNpZncieVrQnciw7lc9HHUeN:chRu9RV2C764l4Ui4n4U34f7V4Ui4n4Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766130, "uuid": "6c49ef1a-e5d5-4f9c-972f-0e2672f7b251", "value": 1059, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766130, "uuid": "f33afcee-7513-4166-a250-447066f80d1a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ff1ca76-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766130, "uuid": "a9d33f30-d7f7-4d87-a86d-cb028ffb3135", "comment": "Malware payload", "value": "ba112f4abbdcdb500b7f3df0a85af0a4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766130, "uuid": "3595b6b8-2dab-4477-8665-60a11d007270", "comment": "Malware payload", "value": "09769b2b27799fa1c081ce187679681f374b558a6be79aa496ebde77368fcb61", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766130, "uuid": "51a83489-3b74-49ab-ac46-a567a6ce3236", "value": "T1FD412DB025F148732A611540B3371BA67BB3D8474593228C38DE1F396F97B06A1EF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766130, "uuid": "8073ea15-802c-4f08-b5b2-4e9528604ca5", "value": "48:csRu9RLsnB6gtCznlwnm52H9lwn8zU/ol/i1UEl/C:cCu/mB6tzQqnsLoC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766130, "uuid": "0382c6e5-8c16-4801-b6e0-23ccb8c8110d", "value": 2307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766130, "uuid": "f653c157-c6c7-4981-b2fd-ae152f6f542c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "902a5d7c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766131, "uuid": "e14e5f65-2481-4bcd-b552-6e5c1803f5de", "comment": "Malware payload", "value": "6f1906756cf7c7440c74548b189a3259", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766131, "uuid": "b94cd15b-a8ac-4fba-acdf-b1659ce0c625", "comment": "Malware payload", "value": "1bfe11abe577bb56a8b8d2bb98a9d244721d3da75660ae78ca5b0b941e4497bd", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766131, "uuid": "b6be7d8a-4203-408c-911f-eb7843d75349", "value": "T17302827125F20C333A705984B2772BA6AB76D95385E3318C35DE2E366F86F02B5AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766131, "uuid": "44dbe426-22db-4171-a7b8-d8ddcf8303e7", "value": "48:cnRu9RZnB6/a9lwnmtAlwn8qAlwni+JYlrEJ0/hE/x/alr+1JYlrMBsJYlriSJY+:cRuhB6BKlmlVkxafdYx36HISISVYidkv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766131, "uuid": "037204d6-076b-43cb-9b94-763d136f447e", "value": 8329, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766131, "uuid": "6d19c753-1deb-4218-a9b1-f26d0dd0e47a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9138ec63-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766132, "uuid": "34659d0d-ae58-4a62-979a-108357cb235b", "comment": "Malware payload", "value": "3d0f731a02999dd37ff89530dafbddc8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766132, "uuid": "da25d26f-d705-435a-bdc8-21fdb03b81c8", "comment": "Malware payload", "value": "3fda8164c4484b925a55d2a066413ca0f73393aa1dfe1b924fbc9523cf3445df", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766132, "uuid": "fe65e8d3-7f4b-46ad-820a-d657d2123466", "value": "T17C32557721F08B32D7C410C9A3B71A654E72974B856214B5F4BE6729AF2DA0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766132, "uuid": "7264a978-bf7a-43ff-bb69-15fad3e0b191", "value": "96:cCuisht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waYvjGlPoDMEKEVzENE0v:cCu34hvZ5m5FG4j4HKNpivyRvOMdxX+w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766132, "uuid": "cdde7159-bc33-47cf-973a-91661d773d66", "value": 11913, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766132, "uuid": "c26a4950-daa5-46fe-b2e9-0f7b89776df4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91502ba0-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766132, "uuid": "54a5d23b-5540-4f59-8c30-6f4d59d82f8c", "comment": "Malware payload", "value": "fd1bd8fb0f729a8383ee2fe4e2fbce0a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766132, "uuid": "feb16b97-9ea1-4a89-a470-c9513f97588b", "comment": "Malware payload", "value": "8af840ccdaa83bbd0e876a942fa01b4d3e8cb9d699b1dd9f87be7e75d1383dff", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766132, "uuid": "adfc67a6-a295-4b0b-9666-6ed3cff13534", "value": "T17B2218B025F049332E206A40B3372BE6ABB6955349E3218C35DE1D35AF87B52B4BF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766132, "uuid": "508db800-ea64-49d9-820f-a44a39290981", "value": "96:cRr3k0B6z93aoU21+CUXp9vr0WKGThKrKSw+F9t999jIBGIBsIBbIBRk:cRr0g6z93aoe0wGTTtBH85", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766132, "uuid": "1cfcf845-2736-4f8c-a59c-2b108e0df4ad", "value": 10263, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766132, "uuid": "da905cf2-d983-480d-8aec-c5f93e31d653", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9151d3d2-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766132, "uuid": "6144839d-7375-4262-a851-e380f1d8a96d", "comment": "Malware payload", "value": "bc73955f75a526ed1bd27a2e438bc38c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766132, "uuid": "6a5a96f5-9d77-456a-8c58-0e8dcfc5d468", "comment": "Malware payload", "value": "6be66a8360ccd4411b4216c875501b77a034e35a9a2888edb2910ce0689bd8f8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766132, "uuid": "99c139b4-9fd6-4e02-a661-17436a6cbe8e", "value": "T18B12B57125F14C332A605A84B3772BA6ABB7D95385E3318C35DE2E256F87B02B1BF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766132, "uuid": "44f51980-5dfb-4714-acdf-79a50fa1904e", "value": "96:cLu7B6y6fOSwxkEgI4GKg+CIBcIBZIBDoYsEKEV/ENE0rEAEpuEFElCvd:cLul6wlXFX2lv+MDxX+r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766132, "uuid": "3458c6e6-66a4-4d55-b9a4-dc04793809f7", "value": 9479, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766132, "uuid": "c8be7662-5b9d-4145-aa97-3348d12b3a38", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "917a8460-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766133, "uuid": "33edde1a-25c1-4a74-abd2-eb050d841cd0", "comment": "Malware payload", "value": "e94486d96c822589ddafd85e4606d386", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766133, "uuid": "ce67f23d-648f-4377-9eda-143d523d2951", "comment": "Malware payload", "value": "aa661cd6457e783a30a4be81b281af73228a93f5ca23d1ec2639237f4599e4fe", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766133, "uuid": "2d39c451-66b4-4d55-8305-025a57744292", "value": "T1D441AB7450F14D732A586440B6B32B856F73CA13415322D875EE4E6A5F8AB0266AF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766133, "uuid": "a502f441-5c60-48bb-9c83-2c0aa54ed3f4", "value": "48:cniRxuGRys0/iPdFHPwWYclwnECPZmDl27lwnp6Elwns:cWu4SioVdZqzQs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766133, "uuid": "b203b31f-ba50-4592-9f10-c359ea890666", "value": 2217, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766133, "uuid": "0f0b4128-ac25-4db0-be4e-4aa79ba80926", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91dfebd2-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766133, "uuid": "a87726ba-b46f-44ca-b096-79df1917be26", "comment": "Malware payload", "value": "92be4cd162eb518ba3e93112adf741ad", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766133, "uuid": "77ccb801-ded1-4894-81bf-b0fcaff2e329", "comment": "Malware payload", "value": "9b1c952cf5ebbaf3869fddd515a2d6f908f13b92d3acaac6c348ed0599bdc0a6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766133, "uuid": "164bd19f-014d-4171-9909-2789b5ba1044", "value": "T13A313C7850F10D732A1CA540B6B327957F73DF17865323DC35DE5E665B8AB03625B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766133, "uuid": "611b54a4-e53f-4037-a24b-eb1245246bab", "value": "24:cnnRUR8fARWER5/iPdFHjeef5uZW5FkXdflUlc9HHEDsJlc9HHUeN:cnRu9RWEj/iPdFHPwWYclwnEDsJlwnX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766133, "uuid": "ae2635dc-4335-4634-8e02-58b5bad36560", "value": 1500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766133, "uuid": "8fed5a13-5ecb-4de8-892a-0854be6106a8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9352639f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766136, "uuid": "57481f38-2a68-4e57-80a1-6d4a4fd83bae", "comment": "Malware payload", "value": "9a3b0f673ca65f35435ad3a209c6b5e8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766136, "uuid": "3d0de69e-9db1-4f8b-b125-ee5b255b4d87", "comment": "Malware payload", "value": "e9028f077528dd0caad80754d233cb0bea313f2bb2c8a4b8cd37dfeef4df005e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766136, "uuid": "90326f03-be92-4faf-aefd-3eb6486bf604", "value": "T12222473B21F08B32D7C420C993761A654F72A70B456614B8F4BE573AAF2DA0371E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766136, "uuid": "14f143b4-6c38-4739-9307-a2c52d635841", "value": "96:cCu17sht+O+v1fsn+h4+tIicqbA/GsGCuKNppjrwakoR0joKAOxhpb:cCu1C4hvZ5mzjqKNpy5/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766136, "uuid": "fbcc80f0-2660-45ad-8e53-1d5c6b04b017", "value": 10467, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766136, "uuid": "28726503-c997-4f1d-b48c-f02b0b5d04f9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93557434-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766136, "uuid": "eaaa8673-c770-4f6d-b4e7-2d0f1f8e8faf", "comment": "Malware payload", "value": "236e76c64eceb8b47ce683c36c254079", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766136, "uuid": "d8300a0e-07ef-4b32-bf32-8d1499762e4c", "comment": "Malware payload", "value": "9bdedce0feb233ce02eafe2d234e0fafdb125d3f0c737111343bc6b600b0da84", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766136, "uuid": "8124da59-b7c0-4db3-b38d-4b2215737805", "value": "T145C1F9B424F14C332E21AA40B3772BA2ABB6D85349E3258C35DE2D355F87B12B5BF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766136, "uuid": "d93089cb-bfa6-4790-954e-14db3c2bf218", "value": "96:cRm3k0B6ZjmLuXfUbsmzqmvs8+bXIBSIBC+:cRm0g6FUQv6oXdA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766136, "uuid": "01aaa52b-fe1d-4c3a-9c18-bb65cde9977e", "value": 6019, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766136, "uuid": "01c4d151-4691-4a7c-b600-c0ad19c8829f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "935b7c68-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771766136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766136, "uuid": "65022786-abf4-4a02-9c2b-33d2936a143d", "comment": "Malware payload", "value": "01b5356a3a9b927b38de91cae6b44d2a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766136, "uuid": "0e92f878-ad95-42b4-bb12-e995fddf0815", "comment": "Malware payload", "value": "85fb57a8d286b9e130a352d32df3e34a5b186e6d18adabaaf78170e24c03c0f3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766136, "uuid": "05fed0c5-bd73-416e-97c0-4a9e7ddfe29b", "value": "T1C022463B21F08B32D3C450DA53A65E614E71A70F492614B5F4BEA329AF2C90735E3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766136, "uuid": "f98b5600-d2ac-4c5f-8c5a-e08d2cefa174", "value": "192:cCuYK6p4hvZ5m5FG4j4HKNphvbTVtAoMZrIT4:9p4hvZ5m5FGGoKNphvbTzAoMZrIT4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766136, "uuid": "e3d64356-3a8d-4e29-bcb3-aeb169073383", "value": 10327, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766136, "uuid": "45cbea46-30f1-4ce1-a87b-c04665b0e71c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "084a7d43-0ff1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771766332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766332, "uuid": "e2245d2f-fcf1-4ec0-86bb-0fcea49c57d0", "comment": "Malware payload (Mirai)", "value": "6d4a9e4921016941644674923415e2ed", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766332, "uuid": "30089e28-5585-468c-8a3e-360eebb15162", "comment": "Malware payload (Mirai)", "value": "d760afe777906bfc0e2e1e6de839c96d5543ba909d0522586ebfd2f382dd7049", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766332, "uuid": "8185b9d0-a5ae-4861-8cf7-90c243f860b2", "value": "T18EA36C8AFB43D0F0E94509B0116BFB3986319D321024DEABEB94FE72BD72643911A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766332, "uuid": "274e46f2-61ba-40d4-82f7-9690697b7e18", "value": "1536:z62p/bNWBthdOZNZAAh8GrvbY6o+i8R7ZUg31QUHPBwU7Cr:m2dbNWBdOZ3AAO+I+/uWV+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766332, "uuid": "06d6bc81-42bf-4364-bf34-d13d80d415d9", "value": 103636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766332, "uuid": "c270a6ce-f7bf-4cb2-b7a9-f05345333e6b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "daf04d25-0ff1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771766685, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766685, "uuid": "153a4836-7ef2-44d5-8e22-f8cc3ff30e4b", "comment": "Malware payload (Mirai)", "value": "466a3282265dfb9980a4712833309b15", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766685, "uuid": "71af3d04-c61c-4129-a41f-320738bc75b5", "comment": "Malware payload (Mirai)", "value": "d697a5af9b5db47e3025798df2ceb90c23b3606585cc5cbd87097257b28c1933", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766685, "uuid": "29872218-2f5d-4df0-86d1-604067912fe6", "value": "T10CC3AE97FB8718A1C8A206F007C70BAD2E932121CE5FE8E37D5D663F5A7A4DB05167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766685, "uuid": "942a8858-284c-49a4-80f6-bae73b71ac86", "value": "1536:hY7P1LZLsN15/PBeJAJANLWVuAfW8RJJ3lZqY0/Pl7g6xMZFgnWEH/LWA:KJZLe50iAp9uDJJ32/Pl7g1grq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766685, "uuid": "6d786fe6-4d9d-4ac3-9b71-9b629aa67802", "value": 124676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766685, "uuid": "4c28a659-fb60-4404-ab25-fdd28b3c52fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f67deff6-0ff1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771766732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766732, "uuid": "b4057b96-d226-46a1-89c2-f27ce85c607b", "comment": "Malware payload (Mirai)", "value": "b2186c84849bcc8e1e1143f366332c9e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766732, "uuid": "e78234be-655c-43f4-a8a3-a8524e9255d0", "comment": "Malware payload (Mirai)", "value": "26426f0ef36e3b7c3a5e40a904cb3040e9a832d3877e84870494ba3af367822d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766732, "uuid": "0dfb4663-b353-4f7e-977b-5a10f27f117b", "value": "T1C5D33A17B5D184FDC499C2744FAAF13BAE32F5591238B26B2BC4AA172E8DE305F5D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766732, "uuid": "518e948e-91d0-49b3-b12e-e20742716a8a", "value": "3072:XNFsFEDahDToQ4coXGDHcz/hnHpIHgQhUCuFlH5Nbf0TG:dFsFEDahDToQ4RXJqHE1wG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766732, "uuid": "92b7b75f-65f8-4b4b-bb9c-cb06387a393c", "value": 142696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766732, "uuid": "8c032d68-902a-4ace-ba9f-2b7e002c194d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5a58ffb-0ff1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771766999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766999, "uuid": "a3766e4d-f30d-441e-884e-e5d173602346", "comment": "Malware payload (Mirai)", "value": "3ebb76158f85276e474f192ba1d09b5f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766999, "uuid": "73232017-2fb9-435b-9fd5-0bac58fce19a", "comment": "Malware payload (Mirai)", "value": "9907f41a5e3c9bc02f8da2af833ad43d21cd0e377cb5f8bf0862537961c92003", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766999, "uuid": "9a5d3291-de77-440f-9811-5ad472ae770e", "value": "T155D33B06731C0A47D2633EB43A3F27E193EFDA8121E4F644255FAB8A9171E321586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766999, "uuid": "02a93bef-9d80-408e-bb9b-e51ac31428ce", "value": "1536:bz94fQVaghE2mTA1FboAExfTIoEPtn2n+Y7bQ4znvAbj00WulzNsq1GcmywJ4:bzZEZE1poAEx7Et27k4kbtVT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771766999, "uuid": "dfd0f044-b689-4895-a244-0b62825f07b0", "value": 138132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766999, "uuid": "f7d50ad1-e1fd-4660-a1a8-69bed3d451c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a36d9fd-0ff2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771767006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767006, "uuid": "7d54a35d-6f9f-4420-a3df-ffb3ae355c3c", "comment": "Malware payload (Mirai)", "value": "a154d1964c982125247f42dcbbaae149", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767006, "uuid": "bb19f0e9-275f-4e1e-a582-db56bda52cff", "comment": "Malware payload (Mirai)", "value": "3663758c855abe296c8459bca6e4c3e3fada26ef9525ed287f917a89c575c48d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767006, "uuid": "199f7b47-52dc-4311-923f-26cbc07964fb", "value": "T1ABC3E70AAF614EFBE86FCD370AE9070525CC651722A83F7A7574D828F64A14B59E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767006, "uuid": "ffa53509-394c-4357-b985-fe4e96a3d49d", "value": "1536:Bit7X8d359PuniY2K+1GSet7kzAwPA50HCWKEW42ZgwBECES8k1o65KkBvwNrz:Bit7X8d3w2Z1rNKEL23BbFxqz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771767006, "uuid": "18957493-f976-4401-a58b-f3340ae91cce", "value": 126612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767006, "uuid": "ab2cbf2b-c138-47ce-8e7a-3a28e42c0f7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad5b9db5-0ff2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771767039, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767039, "uuid": "ed31eba4-766c-4227-9df9-bb702d674547", "comment": "Malware payload (Mirai)", "value": "17d2ba9ee354ee5ed50cd6bf46ffeeab", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767039, "uuid": "92ebb858-cd32-498c-8fdd-9edfad9d9d9e", "comment": "Malware payload (Mirai)", "value": "54a97094e905eff0a12835153f7737d6faa2249dd417dde5b44b5a29f74a2941", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767039, "uuid": "f73708ea-a019-4ef7-97db-bf91b93a34b6", "value": "T130934B92FD818652C6C122B6FB5F028D376713A8E2EE72039D256F2137CB95B0E779", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767039, "uuid": "831b60cd-a413-46e1-9c28-fe61e1bd35f1", "value": "1536:eQJ3AQSlH9rAScPlycYEUmhcFfPmeueCRilvl71ClIgKzzoDFvXOx:eQ1AQmp4lqKEfPme9qkvlQCTzkB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771767039, "uuid": "d2a62f0c-e150-45b3-84b6-7f218e28afa3", "value": 96044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767039, "uuid": "a394a2a8-9f26-4892-8321-9390b331dda7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae3c6a85-0ff2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771767040, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767040, "uuid": "b073344a-0b59-4ca5-b42c-efaad71cf4b7", "comment": "Malware payload (Mirai)", "value": "897061bb9966b24efa18d520925adaea", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767040, "uuid": "e85a49a0-1eb2-4088-bf24-93941490b6ec", "comment": "Malware payload (Mirai)", "value": "fc96ceaf0b8d442e5d6a18ad7cb3c5fef18e7a416d454b7f2714355aca4bd148", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767040, "uuid": "910f9b76-29c3-42aa-815c-1fddf8fc79d5", "value": "T18F431992FD9249BAC6C453FAB71A928A337323A9C2DF7347CC180B51668A50F4E77D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767040, "uuid": "fa8f4ebd-589b-49f4-a089-70955113e6c1", "value": "768:ZqyuLWZsTfhnkpYGLFlD75rvk2fhOk3gzBB74eCp1JXzFs0nKz:3uLWGfhkphlDtrRfhO8gzBB7uX+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771767040, "uuid": "6c2a8d94-48ce-404c-8858-70377bde64c2", "value": 60324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767040, "uuid": "6c4492d7-0e18-42e6-84ed-6588cf935025", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4d20eeb-0ff2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771767105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767105, "uuid": "f4ad1a89-09a9-42a1-bd17-880f71166fb6", "comment": "Malware payload (Mirai)", "value": "b2d393ed324d481f1db3df991b1950f5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767105, "uuid": "e0c56692-eee0-42a1-a838-a240f7b0433e", "comment": "Malware payload (Mirai)", "value": "6f28c7f9d6c631bea5d1356861eb5e667fc06027d80fbbdd0beee82948fa098e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767105, "uuid": "1760214a-52d7-4d43-9fdf-fac41f8a244e", "value": "T14683AD63CD2A1E94D19986B075B08E384733E112865B2EF758AAC776D087E8CF54B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767105, "uuid": "5271b232-03d6-48c4-b4d6-732bba6f4671", "value": "1536:Csd5xvDofm8GzSB+Je4Kt53lIp0KCOkRitjkF:CS5x3pzEie/tMp0KWEi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771767105, "uuid": "259dce8e-e26f-4c32-9b4f-b26b27552667", "value": 87908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767105, "uuid": "1b027a52-40ec-42eb-bd48-8c4e84703cce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfb1ddad-0ff2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771767123, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767123, "uuid": "86574cae-21b5-4754-9917-98ed32179017", "comment": "Malware payload (Mirai)", "value": "f0ffec1ddb3a84bd0da2084effbe1a95", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767123, "uuid": "4c2ed24a-3f9c-4869-939d-e8cd44155bea", "comment": "Malware payload (Mirai)", "value": "fab8e43f6d6b009361bf9bae8d637002ae5ab7f27a5b26bd2d13b0b0c2b2e331", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767123, "uuid": "cb56ad2b-8187-4a80-8357-c6633d06dc55", "value": "T190C3B64D6E219F7DF768833047B38F25979833D636E1C685E26DE6041E6034E681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767123, "uuid": "f9cfb8bb-0d13-4b95-a97a-795ed3361d69", "value": "1536:+dW/PdFhuC6Tsl5NvwhiUbo3thut/13fA9QgUJzPAMdi7MeGLkHGtTs6qh:5dLks5NvwhutAtCygUJzXdYhGW6+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771767123, "uuid": "7b2afcfe-e880-4b8c-a423-25289d2663db", "value": 126612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767123, "uuid": "6e3c8c2b-aec4-4831-ac6b-ec32a31371c0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2acea3c-0ff2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771767155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767155, "uuid": "c5e46d51-98ab-4073-915f-caa79806b57d", "comment": "Malware payload (Mirai)", "value": "e662ea19336c70fe7348032cd20b3aaf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767155, "uuid": "d53b4d73-ab12-4efa-be03-3e4ab64c9f87", "comment": "Malware payload (Mirai)", "value": "632658bf0e523c2f2b80af1d1cbc46f040868742e6216d982c8ce36842c036fe", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767155, "uuid": "15163ce0-b0b0-47ce-a256-ba85b421055e", "value": "T10CA34AD7B406CDBDF84AD77744571906B530E3620A831F3A726BB967BD362A90832F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767155, "uuid": "79f88312-f6c9-413d-a609-5616af7d677f", "value": "1536:NSQDzVTQbJLQj9TE2vDaF96bgT8/3kHE8PDeP7Nn7jATXdpvN+qD09LgW:NYQFEOq96bgz2P7Z7kl+qD0dgW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771767155, "uuid": "ead17030-1adb-47a3-a365-4653c6208f71", "value": 104148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767155, "uuid": "b79db722-24af-42a2-8d67-a92ec02cacb8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40bc864a-0ff3-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771767286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767286, "uuid": "62c179b5-c425-4e61-9dad-b6dd08cf9fcb", "comment": "Malware payload (Mirai)", "value": "b55ef786832b656db09a5053be0f6b41", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767286, "uuid": "0ec2d195-5529-4f7d-92f8-26cd0af081de", "comment": "Malware payload (Mirai)", "value": "dbc14a2f5c882565ecbf9599a4029fe6d6bec764850767eb6a67e6ab7ed929fc", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767286, "uuid": "97902e4c-36a6-4130-85c0-4e64430a8cac", "value": "T1AE433A03A5BC292BC5D0E33321B34362F1E61B9D51C8D68FBD264E4E9E953541AAB7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767286, "uuid": "ff4ad2c2-8ba3-478c-b8a7-0acbff4b8876", "value": "1536:A7jbYSVZNLXFNlfEypWWj3uO4xPMw4cbh+3t8SBIcKKO:A/bYo02barv8qKO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771767286, "uuid": "8fee51e6-769f-43c8-9a47-50f7b010bb65", "value": 60060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767286, "uuid": "083f3d4b-5822-49ab-9a66-6223e6658705", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24969b97-0ff2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771767383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767383, "uuid": "f4b3ddd9-f888-4ca9-a09d-ab58123bda3e", "comment": "Malware payload (Mirai)", "value": "127034728c5ad37a869406d71c0a9259", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767383, "uuid": "5c681cd9-ced4-4467-86cd-e8fc4c4a2052", "comment": "Malware payload (Mirai)", "value": "8d038bffcb49046ca6d189e45e3b8dfeb8c0dde84ebb030701199a81872d696f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767383, "uuid": "248008b8-99d2-438d-9681-3332f4a1b838", "value": "T17FE329C7F900DDB9F80AE73B48530909B230B79245825B372297797BED3B1D91963E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767383, "uuid": "33d19701-eec8-4285-8c01-82599c9d3930", "value": "3072:f4A7HjKHZW/yGLj0PxmldWupK0lckVxjbiALlVrKSrc:f4VcyGf0PxmXWClcmLySrc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771767383, "uuid": "803445b1-a11e-4a81-b261-c1cf616c333d", "value": 154432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767383, "uuid": "51a547d8-794c-402b-9abd-9b24585cf89f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8604c1b0-0ff3-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771767402, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767402, "uuid": "42bf4cc9-bf16-408d-8168-1688254ae1e9", "comment": "Malware payload (Mirai)", "value": "199512e6d437f7f990fc00ac67d84173", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767402, "uuid": "d38f6fb7-6cf2-4ecf-8c94-4d5684b01587", "comment": "Malware payload (Mirai)", "value": "2a903c33153268a8eab458ccb345c0ed4f6ac449e2627ed81b1972fdf5144956", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767402, "uuid": "4846050f-c986-475b-ab2c-c7a063856ace", "value": "T189837DC6BA43C0F4ED2704712177F7325673E53E006AEE43D769A972ED52642A32A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767402, "uuid": "ba61200a-c4d1-4e59-8e7a-3f935eaf8823", "value": "1536:H1XEXC4tzIZGy4+K936ktG6iH3LVoOtqLEXcXpV/f:HcNzI/3K936QiH3JoOILB3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771767402, "uuid": "016c6ae6-3659-4c7e-9a22-ac29f053dbce", "value": 87696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767402, "uuid": "bf2eec98-6e19-4643-9952-08a2080eb9e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96327d45-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771767514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767514, "uuid": "8a0dac7d-41e2-4e25-aa76-d9ae05b71297", "comment": "Malware payload (Mirai)", "value": "532e35617afd6ef3963bc3b0ef5ee685", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767514, "uuid": "1bd9a448-93e4-437f-8495-29ff45e73b77", "comment": "Malware payload (Mirai)", "value": "508a75af865f1a2f7c890009f33390fb149eccbcf4073b0280f17d8990522d1a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767514, "uuid": "4fe1fa63-c5d5-46e5-96fd-c19d6d26f293", "value": "T10804D816AB550FFBDCABDD3706E9070139CCA51B22A43B363674D528F54E50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767514, "uuid": "e0f070df-d00a-4561-bd07-ab0d04eaff7d", "value": "1536:Yzeia+IuUF3gPS0QCQO6oYJQqczaN7RtJaF64iiTU58NaZ0zk/SQ1pMnEySHtKeq:MeiaxkP1KnQ64hTRaO8pM3SS1Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771767514, "uuid": "a2a054e5-402b-4600-84cc-c40fe92cdd48", "value": 181860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767514, "uuid": "c6ae5314-11cc-4f65-9215-453fcf1eb6ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f678d6c3-0ff3-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771767591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767591, "uuid": "35d0ad60-f3fc-4a46-ac16-a68573bd371b", "comment": "Malware payload (Mirai)", "value": "02a736a86ad5858924c6333643dc1025", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767591, "uuid": "abec15dc-be03-46db-947d-341c9fed1c85", "comment": "Malware payload (Mirai)", "value": "a1f96b747ae6e1c3bf80ae5894769599cabf34bb7f6b9dcb4cfa601a45fffa28", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767591, "uuid": "4301c046-27ef-430f-933a-275da2215ed9", "value": "T1B6B2D03471A8A0F0CD316434F97DC943AB9B45FDD0F97721366600F89B9A88D26E8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767591, "uuid": "e9ae7053-ec74-4e2f-8d66-66ef7df80c73", "value": "384:qoBE5aNSS75BOI+ypZ5vTlYIwcvsdTf5MF1iAUgefoeDYbZXGcH1+hymdGUop5hF:2aNSq5sOHpTqncvsdDePiAUgefoeDeXb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771767591, "uuid": "628bfe8a-478e-4d4b-be6a-8580382edc62", "value": 23728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767591, "uuid": "c38490de-aca8-465e-975c-cd04edef3eb0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9137a64f-0ff5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771768280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768280, "uuid": "f8662396-cd71-4c8f-a4e5-52c5b0a58817", "comment": "Malware payload (Mirai)", "value": "04a52dbd50374930a2928a474cbe1545", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768280, "uuid": "1cb41795-5a85-445a-93cb-de2e77d9d688", "comment": "Malware payload (Mirai)", "value": "111a1b07c0860daf6ec6279e5a49d8f4f723c2c715a19ea550b66561de04098c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768280, "uuid": "3347aea4-7c56-40d1-b997-d2c378ad05a8", "value": "T15393E551BC82562BC6E423BAF6BE668D336577E5C2CF722BC8214B117B8551F0D63B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768280, "uuid": "1ec37062-6864-469d-9c37-fb912ce5ce26", "value": "1536:PWrd+dC++zBz/dPXQL0u4WaJuLaVlW04brj9uYpMNGY2LYgh3:PO+d8zBWLac0yMNGFlh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771768280, "uuid": "3d8e6645-4787-41a7-a04f-e2680bce64e8", "value": 93804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768280, "uuid": "13c5d7c6-acdf-481c-a65e-daf03538b517", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91391880-0ff5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771768280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768280, "uuid": "002e9e7d-5d3a-475c-9a8a-0fbcf3dcfedb", "comment": "Malware payload (Mirai)", "value": "28f67a9d00aa9a907689ee9aaa04fb0a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768280, "uuid": "2a811954-a6b3-4017-a11d-b026f55e7a9a", "comment": "Malware payload (Mirai)", "value": "06777c3166d134e69e39bc24fa08a708cc118417a1b952d464f7c8308cb83ec6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768280, "uuid": "f190561b-e4be-49de-a6e7-5d4ff7ddf450", "value": "T14EC39E32D8396DC4C1945434F8B1EE711FA2A5C441A25EBB1AE5C97900C7DA8FA0EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768280, "uuid": "268a2058-dc50-4a8a-bc6f-74b71a9fbbcb", "value": "1536:iaZwsA5XjVZJK0twtfXd/GW25UhMMJNu5xWKQk0kaXN7Y+UKigHcYSQwKprlzww3:if5Z5Z98XdmVMJa5aX7biySQHrMwEe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771768280, "uuid": "60546e8c-a676-4f5c-923a-3fd34b8f0d67", "value": 120332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768280, "uuid": "0c852033-0b60-4b5f-bf71-dc9e9507538a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "913fa75d-0ff5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771768280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768280, "uuid": "30349488-850b-4394-9686-f2318b3506d7", "comment": "Malware payload (Mirai)", "value": "97e37c5c5c324f057f092051a4871bd7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768280, "uuid": "d5daa5f8-cc0d-4026-bc3e-26efc245e038", "comment": "Malware payload (Mirai)", "value": "7b4700a59a7cfbf8bc96a1ba77a76837c63ec6fa8c49d7e141550b53f8d6a4be", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768280, "uuid": "a47963f4-33b2-43e7-9c06-216b63b9298f", "value": "T1E0D35C0673180E17D5A349B02A3F1BE083FEE5D121F0BA89691F9B6A8676D371485F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768280, "uuid": "3d35b6ee-0c01-4040-963a-0e385051d06a", "value": "3072:CV0zui1ZhMHJCIqWrpP7OUK3y0uMg9Fk+H:LP1Yiwd7OUKC0uMg3k+H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771768280, "uuid": "5b6c242d-33be-45a6-b0f7-4dfb6b6fb30d", "value": 134336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768280, "uuid": "4918caa3-c4ac-4933-8acb-6e2018b05173", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9141f2f2-0ff5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771768280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768280, "uuid": "6de16e81-f19c-4bf6-afa0-c8610e12f555", "comment": "Malware payload (Mirai)", "value": "59d923aed2595804d20572683b581714", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768280, "uuid": "a1da357f-8635-49cb-a3bb-11646578dcc0", "comment": "Malware payload (Mirai)", "value": "478608922af336cf766c3cbc7ba7a24aa51af1a489827a98a721ece2f9efd457", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768280, "uuid": "15cd0bf9-ccdd-4212-a504-e73b3335dd28", "value": "T10AC32802F98584FCC0CAC1340B6FB63AA976F1DD1238B2EB67D4AB123D4EE615E1D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768280, "uuid": "d7764505-a22c-4caf-beb0-2fde5e0ac34a", "value": "3072:e483TghM/1weZbcnITO1yosFAIxnJdhgpDb7Beyr0Ez0zQxAdojgaR/j:eH3TghM/1weZbcnITeyosFAIxnJdhgJF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771768280, "uuid": "da551d48-9fe4-43ba-92c3-e2ff6b219df5", "value": 125472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768280, "uuid": "1c2c5ce7-f49b-4770-8bfc-ed12efae71a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "914364db-0ff5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771768280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768280, "uuid": "05422d88-f5f3-4fad-a34d-a46e23f2461b", "comment": "Malware payload (Mirai)", "value": "4944037b7925b808fa5cf4f757809167", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768280, "uuid": "1b8f0259-8967-4764-a014-fe55603613c4", "comment": "Malware payload (Mirai)", "value": "588ae8f644e3ebd93ebef016603021a7ed064679f61d2d3d5ad35904dbc77cc3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768280, "uuid": "d2c5aafe-5701-4615-b565-340504afd3a6", "value": "T11D343A45EA418A13C4D117BAF5AF418A3332A7A5D3DB7306D9246FB43B877AF0D636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768280, "uuid": "0fcb3ca3-0997-44a5-b3a4-157a7ae70616", "value": "6144:Ego/jNgGzHzakeqacEp1d4n1trcbf9ihM/9+AU:EDhgSHzakeqacE3W1i0G/4J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771768280, "uuid": "96d6b73b-67d7-4e79-a4a6-98aaf086f4b7", "value": 230976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768280, "uuid": "1ba3b08d-39e5-4d4d-9d1e-893fded8cd75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93577263-0ff5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771768283, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768283, "uuid": "08797a95-b5df-45cd-adea-acb120cb5a03", "comment": "Malware payload (Mirai)", "value": "4aa1e9f9b9d1c8ca506995b6fa86978e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768283, "uuid": "100d2f97-67c2-4bf6-b12c-2e91be8e98ce", "comment": "Malware payload (Mirai)", "value": "71a07cec8a8b815d558c2315d32f11c3df037735f75902d2b5dc6a18cdc701e8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768283, "uuid": "fb24e783-b13a-41d6-b755-3c5c001bc751", "value": "T15BE34D8AF802DE7EFC0BE57E44670D15FA30A7613243172D529BFDA3AC321A65D16E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768283, "uuid": "d448000e-adaa-455c-8ba7-e42fb3f9c1ab", "value": "3072:luWypdcGShA/TSPA39TsZJ243nxl9XzrTmdWp:gCGShAr7ThAxl9TmdWp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771768283, "uuid": "b5c3a7f5-6e7b-47d2-82a6-4181680ced3d", "value": 146888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768283, "uuid": "ef23c88c-ad31-4faf-b11d-5efb21fa3dca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93664af7-0ff5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771768283, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768283, "uuid": "0a906683-c498-440a-b1c6-2080dde7aa44", "comment": "Malware payload (Mirai)", "value": "061b99d4177590ca9e229839589d4482", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768283, "uuid": "d9ac9188-aee2-4691-a8c5-89acd605e1a8", "comment": "Malware payload (Mirai)", "value": "25f2649712ece51ae7da8abfbfa3a53e60cbbe8b677a98b6127e6e82631cb900", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768283, "uuid": "ee87f25a-6ab4-422d-a88e-5fdc8107142f", "value": "T152F3B50E6E198F7CF79987345BB79E32925833872AE1C582E16CD7105E6024F641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768283, "uuid": "da822ed9-3390-454f-8fee-02ce31c323b3", "value": "3072:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJBQX/uw9EfszRpSP/Q4vkTTzTT4BFZDiw1:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771768283, "uuid": "19b95f3c-93eb-49b9-997d-d92d6f7f78da", "value": 171724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768283, "uuid": "b0d0eb40-af8e-478b-9135-d3da31a4e61e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4734403-0ff5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771768339, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768339, "uuid": "1be7eae5-88d5-4635-87ab-1bedf426e681", "comment": "Malware payload (Mirai)", "value": "473ac437fdefa993e875a67436fa6f63", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768339, "uuid": "4bff9f68-478e-469d-86d9-d60fe8a34500", "comment": "Malware payload (Mirai)", "value": "bf99f3fae41b891b7a76f6084a7b8ef40fd8f7a348f0a3caa78abb83b0e75d32", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768339, "uuid": "404716da-2b97-4f47-a832-2d8af1dca862", "value": "T1BFB339C1BA43D4F5EC1641306177F73B9A32F0791239DA87E7A89E327C92A419D0A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768339, "uuid": "e6bf94cf-282e-4ff2-b9a8-0557ceac32ea", "value": "3072:PbKW4dCLFaGFBu3/45g1rcV2wtzSr9bMFflX:Pbj4doYGFB0/45gdd9ulX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771768339, "uuid": "d688693e-957e-4d0b-8032-dfe85a482543", "value": 107824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768339, "uuid": "97d682bb-fd1b-4356-97fc-0c6868c669ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcb1abb1-0ff5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771768353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768353, "uuid": "ea17ade6-266a-45dc-9440-6ea74a0cf181", "comment": "Malware payload (Mirai)", "value": "912aab85bc6ba03df70d332f0a376608", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768353, "uuid": "95b94aed-af0c-481c-8bbd-abdeb7e5a33f", "comment": "Malware payload (Mirai)", "value": "63cc62b128ac4d19fd2c90c131a9d821c5f878d0c25a82eaff49f1c98d7e7dbc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768353, "uuid": "73ee9943-c14b-49b4-8022-11938655804f", "value": "T1A8D33841B9829A27C5E123BFFA6E018D332563E4D2DE72178C215F217BC691F0DB7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768353, "uuid": "89a4a4f4-3650-4889-b760-932aace6ee0c", "value": "3072:snFif7apx6XS+kUgpjWXQQKMs0u29wzulziQSo:sn8ZS+dQWXQQK5s9TeQSo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771768353, "uuid": "40092c01-61c3-4cbb-9597-5b4de6348f4c", "value": 140756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768353, "uuid": "9822bff8-1592-4be0-b7b8-060884a5318d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ad63639-0ff6-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771768484, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768484, "uuid": "ac9ea0ad-1818-4564-a08a-93cfa43dfbc2", "comment": "Malware payload (Mirai)", "value": "6cabbacc387e93a3fc745f701613ed6c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768484, "uuid": "aa1538b0-36b7-428e-8256-6e18ee71cdd7", "comment": "Malware payload (Mirai)", "value": "3deeda72be39614686ffdd127677befb2f7676393f1b3f0b79736e49c07dd8de", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768484, "uuid": "8fbb900b-3aed-46cb-b5a7-49626a5a81a9", "value": "T15C330223B215FD62DE761D3962FD4C8F7048416EE4ECA82239C859B162D2117FBE49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768484, "uuid": "7fc2d434-0019-4ac1-af93-633d1dc7c548", "value": "768:ffZYvZxNZ/SPjiUv0w0zyIvfgJy2LHRfbGA9q3UEL2qEK5J6OAsNTGjf2tl8XOYh:EPtQjiZVcykHRDGJL15J6RN2tAv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771768484, "uuid": "0cde08ab-d493-4db8-a182-4879d1a871f3", "value": 51424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768484, "uuid": "073bba9e-9980-4650-a898-680ff50aff07", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1dfa3f54-f986-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771768614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768614, "uuid": "9531eb57-18d8-4242-88fa-4edd02e852ef", "comment": "Malware payload (Mirai)", "value": "68cfed234a6536ef768dd42cec3e10db", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768614, "uuid": "00c7cbd2-ee58-4e65-8fc3-162dab5b6af9", "comment": "Malware payload (Mirai)", "value": "cb21763bb89afbdc23dc0f00e0a0ac2b2aed3e292263c195b588a1d0acdbf265", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768614, "uuid": "aeac6a57-5328-4c35-a0f5-b85682e55602", "value": "T1DF53021A5D5817FFCB7564F0068433609EFA0BF97A16DD418762C696FF122E89AC32", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768614, "uuid": "ab6fac98-503e-474e-944a-0790a18655b9", "value": "1536:0AuFmSBHblkj5goFEHT4ulPzsGMf44/PAysSE0VS1:XuIqbQ5goKHTNrdQ4KU/0Va", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771768614, "uuid": "e88ca505-af93-4204-9c49-14244a49ea02", "value": 64420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768614, "uuid": "62031176-da4b-4e92-958e-e38950e9648b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20d7d562-f986-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771768955, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768955, "uuid": "a7bb8a6f-901b-4394-bea0-b681174fac3a", "comment": "Malware payload (Mirai)", "value": "395c16a4ac5c05ffb527d720f10d9cb5", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768955, "uuid": "b64a39e1-be86-4594-aebc-424a7f97be29", "comment": "Malware payload (Mirai)", "value": "e788e4ffa50bce22142d86f232cb6832bb07c3d036ff816854af8debc0dc5dd0", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768955, "uuid": "185d8a47-8861-4145-952b-e539ea438e2b", "value": "T1D23301D0D3E11FE6C4FB92752B9E76515A30E6718728CAE54A843C456BE1B4C12CE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768955, "uuid": "0315b6aa-075c-4350-87cb-db0f0ed332d9", "value": "768:GC3cz0GBTqHei7we1r33OPB+ZyquILVSzSe7cMqIcYPqyLhp4nbcuyD7UsUR5:739wex1L3OvYyZq6Pf1p4nouy8P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771768955, "uuid": "4c2852f6-92a7-46af-a69b-5d55664cfb9f", "value": 51988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768955, "uuid": "1025db22-bffa-48f8-b278-62a61f491aa1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20eeec29-0ff8-11f1-8369-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1771769380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771769380, "uuid": "b8d422f0-21d9-42bc-a64e-765b0dc0c2fe", "comment": "Malware payload (RustyStealer)", "value": "cc566241c478541299b3216ed442d5e6", "object_relation": "md5", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771769380, "uuid": "141f5f11-c6f3-4041-9a3c-1c4455889196", "comment": "Malware payload (RustyStealer)", "value": "c32e1db396e6b64846792f05c776c5b52f34834b0500bc18f982927e07ca3eeb", "object_relation": "sha256", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769380, "uuid": "a9501aba-c181-4644-8567-831249e07bab", "value": "T1E8656B03E69989EAC49EC178C7578272BA32B88D0731B6EF17D51A243E67F902F1C7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769380, "uuid": "4a218772-4ff1-4a77-aaab-f8307df7515d", "value": "1c072e6d0c02b4a1536f751c67de0f47", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769380, "uuid": "db9f67a1-c9eb-46af-bcfc-926e4db6d245", "value": "24576:k2zNL5V31UfpxQ6p0fkunuDBvc16qHQAfcw2t:RzNL5V318fQ6ekunuDB01RHT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771769380, "uuid": "d40e6412-5bee-4bbb-93f5-0c2cf6e5b967", "value": 1476096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769380, "uuid": "8b4c04a9-750d-4131-9b4a-ce78dcbd24d1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4919ecb6-0ff8-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771769447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771769447, "uuid": "8cf39200-d279-480e-9419-0477bf27fb89", "comment": "Malware payload", "value": "b0b23ff4c1d588a26ab769814b8b4e38", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771769447, "uuid": "97cdd580-6e89-4fb8-86dc-1d7640ec40a4", "comment": "Malware payload", "value": "c34ef0050ef4364dd3908c78bebf046da45dac4574e8f90d9ac2e0d2f74e8cfb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769447, "uuid": "2e23bd75-0867-42a0-a4e1-c7f6182814f5", "value": "T10634E0052F28F8A9C986B6FA45FB180E3D2B59F07453B113A23DC955BF0A96EFD641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769447, "uuid": "f36eb1ca-437c-4e33-a98e-2ca4af52b93f", "value": "6144:4IQZJlnW6Oil+x/dMWna22juFN0q6g7pLfUrxFJ0qI:SHlWwKdD2H4pLfUfJ0qI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771769447, "uuid": "9f352a78-1ecc-4c0c-86c0-4c05725e9932", "value": 247889, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769447, "uuid": "26699711-e930-4771-a38b-88ea22d900b4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1771769535, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771769535, "uuid": "11efe65b-ff39-4848-a753-6f474663653d", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771769535, "uuid": "f921b841-59d4-4cef-8de5-d06d21286328", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769535, "uuid": "49d5a045-98b6-4f57-9ef5-b62b30659122", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769535, "uuid": "1595a641-18db-4162-954b-ce2890ece0d5", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771769535, "uuid": "d0a19ace-5ed7-453f-9df2-af09608d3608", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769535, "uuid": "f524e4d4-0e14-48ce-8e65-b78365f4ca6a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769535, "uuid": "120e3544-8736-46b4-8e7d-cff48a5731ed", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fa7ce9e-0807-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1771769535, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771769535, "uuid": "714a6c95-2bf5-4502-ba5b-ece5acbd9cbc", "comment": "Malware payload", "value": "df64a5c787f34c5b38c8103a67e3d97c", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771769535, "uuid": "c7da39f0-5d95-42a0-bc03-8329d5e309e0", "comment": "Malware payload", "value": "6f1bbcaa6efc41ee257919a85acc9ea5b1f82c8def103e39629e0b5161800ccc", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769535, "uuid": "a3edb790-0480-43ab-bc78-a5f85fd021fd", "value": "T11D356D56F9808EA2C5D8177BB75DC35833234B78D7DEB102CD08672477AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769535, "uuid": "7b23b151-06f1-4cb1-bea3-4eccfe0b2343", "value": "12288:sQFoCapOujNJ7h8SYIhU1wwy7zh36bV7CIBolbVtE7ZdXjboyjBNY3v9fQbLv:sQFbJi5Pa/CbmzotVqv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771769535, "uuid": "0973f34c-6923-4d8d-955d-184b3f09a4b4", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769535, "uuid": "448b826d-6648-479b-af01-e103ca1b8e2e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769535, "uuid": "3b8b34b4-1ca1-48fd-9349-53a386a64c6e", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b21a4a0-0ff8-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771769585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771769585, "uuid": "b36e3a1c-a30d-4e3e-95e9-7c8781f05f4f", "comment": "Malware payload", "value": "9c659339a74af8189c5d9b6e34317372", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771769585, "uuid": "b1456c6a-02fa-4d73-af30-3df6c1dd9b96", "comment": "Malware payload", "value": "627199ee9e2c9225a4ef2c435a8d69f24e97d1b24d705c8baa39f6bbb9d67898", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769585, "uuid": "7d3a994e-87c0-40dc-8608-8e61173663cb", "value": "T1C224E0B9E037BF5CCC8ED94E7ED96DF600B2895519E11266018F8D2A72DDAC3840EC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769585, "uuid": "05789437-9bf3-41a9-b775-f3aef85c1bc0", "value": "6144:N5k8Tv7XgeeyVrB2hpFiobNtDIbtQkNN9Q30:v/1kBN4Pc0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771769585, "uuid": "26b4ba9c-a424-488f-ba4f-ae44dabd516c", "value": 223315, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769585, "uuid": "2e470aaa-a011-453e-864d-cfe8d1193cef", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6deaaa09-0ffa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771770368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770368, "uuid": "cecb2992-f098-4cb7-a642-4f40a2dc9015", "comment": "Malware payload (Mirai)", "value": "3cbe1ab9828369a6a9cd188a4dd8213c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770368, "uuid": "48e525f8-b345-4c2c-bcff-2a7993db79a1", "comment": "Malware payload (Mirai)", "value": "6e87a8f307b840926ada96378cef55692d571aea601b2eb094ad0784a4961132", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770368, "uuid": "a699be20-7b3f-483e-ab25-d55312fafed8", "value": "T13363851A3E119FBDFBAC863887B79A20964837D616F1C584D15CEE015E7038E781FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770368, "uuid": "d6272ec2-fc51-41ca-90d7-8105e374900a", "value": "1536:GVpuIaAyz90k15bNW/ZBVm/EGXCgPxJpmnx7d6bpcoE:GVEIJp8bNKBVmzhxJIGLE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771770368, "uuid": "8a4f4a7f-05ab-4edb-acbd-8fff169ea867", "value": 68276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770368, "uuid": "8b105095-f49d-43af-bf80-9837540025b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dfde51c-0ffa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771770368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770368, "uuid": "85662f05-8ee1-4856-93f9-7c471c0dcbae", "comment": "Malware payload (Mirai)", "value": "1537734358d6e06b03357a200b13187f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770368, "uuid": "21c29ef6-c097-4561-9698-b5b2c159b155", "comment": "Malware payload (Mirai)", "value": "ad9fe8cedab676a135208249602c65f13a7625f5460d756c8e3eab625b7e7700", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770368, "uuid": "6ee62b07-4349-425b-9ac5-5de28ce71cb9", "value": "T15363A416BF614FB7E86FDD3709E9270524DC541B21A97B3ABE30D818F60A25F19E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770368, "uuid": "d5404278-27d0-405b-9d65-9b818fad3fed", "value": "1536:3ic5mAk09TobL0JPNuBSBsL3polf+FXax:3P5rlKIJPNRf+0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771770368, "uuid": "7d0fa829-c12f-4fc3-9e74-d540b13ff09a", "value": 71508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770368, "uuid": "46609355-cb7a-48c4-9c46-0ac347bbbe99", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dffbdd7-0ffa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771770368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770368, "uuid": "7419870c-3736-41ba-8874-6a255de1fa6b", "comment": "Malware payload (Mirai)", "value": "b7f55c100de89550457ff3e28611fd73", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770368, "uuid": "6130d3b5-db50-4ea0-a528-0fa28fa3b47b", "comment": "Malware payload (Mirai)", "value": "dccf1c250a821d1ea82a2f3e410c19c01f0779386d44cbf2ab5eaeb095750edc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770368, "uuid": "8a49a401-d321-4731-a58e-7e798d61507f", "value": "T1DF2308817891AA39C3D063BBEE6F018D3345A798D1DB3397C8241B947ACB90F0D57B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770368, "uuid": "97047eca-eb36-4ce6-9870-05b237836012", "value": "768:WV9JdEjLgSXoEai9bFvFbZB7QQEPJddnj0eCSGFu+JNrymyN/jhLwCVy/Jx+5H89:aJ2/gHm9bJ4ddo9JNrynNbNeZWm22W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771770368, "uuid": "3a18f368-179f-492e-ae28-033273c92a7f", "value": 48176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770368, "uuid": "ac5e8cca-8d99-4139-8016-935df233cde4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e13eded-0ffa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771770368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770368, "uuid": "9582e6f5-0cfb-498f-829a-c18f6c6f308d", "comment": "Malware payload (Mirai)", "value": "02a65107051d80aad31077d3b968dae7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770368, "uuid": "615b6421-7cf5-4445-8af9-fcc36e63b978", "comment": "Malware payload (Mirai)", "value": "6a19224d35324d832ea1d41dfcca0be75f4939b873606a227bfdf78de670cbc4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770368, "uuid": "4289bbc7-515f-4834-b375-0c63b71d0ff5", "value": "T16153F881B8819A25C6C557BBFE1F018D3306975CE2DE73129D245F647B8BD2F0E2BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770368, "uuid": "13f35f5d-e593-4a53-bee9-fb5925634a4c", "value": "1536:YdnN3laIcTjKGo5Q/oNPAMKiYDLNIHiOataQyG:+AIG+GYQ/sPXvVataQy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771770368, "uuid": "2ce0ac99-4258-4861-8382-6b2f81d4980f", "value": 66688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770368, "uuid": "02508164-b3c8-4426-9518-b9bc916d5e4f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e3bf4b7-0ffa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771770369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770369, "uuid": "c6382bc7-a79a-4250-b569-ae9d85a174a4", "comment": "Malware payload (Mirai)", "value": "7c566bbf825878d274cad3fa0a13ffdc", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770369, "uuid": "402ba995-c5c7-493d-af5f-04666ed8d440", "comment": "Malware payload (Mirai)", "value": "7d6eafac8ca5ebb09d3594439dffc61cbedc726ef120977bab1198702ae984cf", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770369, "uuid": "727f6860-806f-409f-9136-6ef55fcab765", "value": "T1CC332ADAF9029E7DF88FD6BA80674D09F631221040830B267777FDD37E321949A52E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770369, "uuid": "0ed16068-2974-40f1-b3f2-37a9bf29cdbe", "value": "768:HaeKdnuq3yaHFpeLZMpyeTLRDYuR7mwGJRytw9hDdEY8muc:6fdn33y++zuBmBRytwzDd98+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771770369, "uuid": "a05566de-21eb-42ea-b3f5-02169d7a814f", "value": 51956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770369, "uuid": "7b1165a8-a83a-4bc0-a608-4cc760f97e2a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e486ed0-0ffa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771770369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770369, "uuid": "89079333-3569-4be8-9796-b0062eb33f4d", "comment": "Malware payload (Mirai)", "value": "a55ae82cc08b2b6dbf29be1626f04956", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770369, "uuid": "0c3cbca4-987a-478a-a53e-2342d22710af", "comment": "Malware payload (Mirai)", "value": "933577b40486428e60d29f5c774b1ea412b8a4a52d60de20eb316126e0153c6d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770369, "uuid": "9e7e3fd0-8118-4af6-b793-37ee7e2448af", "value": "T134232AC57583F9F8DC15057C207AE7729EB7F83E603ADDEBD399A4239812601A2032", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770369, "uuid": "35d4413e-a9b8-4d1c-a6af-a2ceb2c179c3", "value": "1536:AsbZYXNkWLJMkN2mBHQv5pkmHAkFwAEUT:A9XNj9MkN2mBH85Fgk6/UT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771770369, "uuid": "822b4820-d803-45f7-bd15-84a53bc69863", "value": 49752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770369, "uuid": "a014c154-cfb8-4439-bbeb-897ad66b09de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e492b0a-0ffa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771770369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770369, "uuid": "8a1acc20-7ce2-4105-b9cc-ec7afe19f728", "comment": "Malware payload (Mirai)", "value": "56f29e066a0c614a2302210d6c0e01b1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770369, "uuid": "6c31f5fd-8b1d-4789-9c9a-e3a798ace011", "comment": "Malware payload (Mirai)", "value": "5ff9fc44598d7b82242c23044f94fc9b7bdfb4477cc764f766fcd2bd893596e3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770369, "uuid": "53d0c191-560c-42e1-ac2f-566df1aaec42", "value": "T157337CB6C4E9BDA8D2049B74BD15CA348B13A40086672EFEDA45C699C087DECF2097", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770369, "uuid": "044f61ba-987d-4c5f-9180-486e06eb9842", "value": "768:UawatoKwtt8KH5BlqFejY9vijo9vKv5YJvumk9AC5o5A/YtLrCxJ:Uawa+KwtypzAhvSImk9AVcYtLrCxJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771770369, "uuid": "3a6b6f1a-fb08-412c-942a-44ede895e1c8", "value": 50672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770369, "uuid": "ed186bf6-6358-473d-835f-6122393ddb95", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e5dc45e-0ffa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771770369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770369, "uuid": "b5096b71-b9e6-40d3-8668-0a22cef036ae", "comment": "Malware payload (Mirai)", "value": "2deb41043c5f45ab6b0c829af89c530e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770369, "uuid": "6888eef5-21d1-43de-a4c9-4bbd4e13c3e1", "comment": "Malware payload (Mirai)", "value": "36167ac355780f9c29874a847bf59cfa4a54de3a9170e5d122f2781ae8a66f11", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770369, "uuid": "f01d9df7-7b4a-4c19-b1a8-d887e364c8b1", "value": "T1E44308817881A626C7D05377FE6F018D3315A798E1EA33539C291FA47BCAC1F0D6B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770369, "uuid": "8aab4e6d-162d-48b6-8bf1-8b989e4859e4", "value": "768:GeI1ekFMSpevMSzscSlgUeXt1vSJdcmC4XAFPAFE2pGltryoZaLwCVy/Jx+5H8ha:w1vZkMm0dc7rZltryqweZW34UHY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771770369, "uuid": "77facf48-f128-48e4-914e-2d970bae9b6a", "value": 55708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770369, "uuid": "e3b8a748-0ec1-4edf-9b9a-e04d6bec45fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f0f02b3-0ffa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771770370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770370, "uuid": "d6bad727-6beb-498b-9a15-b3122885ec1a", "comment": "Malware payload (Mirai)", "value": "d9925515be089ee733a0ffeb0e199e40", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770370, "uuid": "e9310eff-7fb9-463e-b1bc-e1bd09f10d3e", "comment": "Malware payload (Mirai)", "value": "886507db78a4f3aeecbe461c11f93598165450acf04a3f83fdffc10e534827ed", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770370, "uuid": "f7df7f32-2ee4-4c7f-8ca0-a8953a98982e", "value": "T167C33A46EA409A17C1D2177BFE9F01463322D755E3DB730689285FB43F86B9E0E63A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770370, "uuid": "32e49cb5-dfc5-4627-badc-ad15f6cefdcd", "value": "3072:nF2f8Y+oqCRJXIEtfZLTFBM+j0NnmytzM/9qJUyo/:Qf8Y+1CjZZLTFBnjsmy1M/9qxo/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771770370, "uuid": "52b9ffd0-fa33-4916-89a2-e11e5af09f85", "value": 126156, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770370, "uuid": "d8df97fe-4134-4a46-a0fc-48966fe4fa57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70d68556-0ffa-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771770373, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "2d01bece-97f6-4b90-beaa-163d33ac38ca", "comment": "Malware payload", "value": "5ed37800ea9f63ee246e71dcbb74f558", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "a10cffda-1aef-4d91-bba0-7e549766c323", "comment": "Malware payload", "value": "cc62374e22a0bf799a0d4ce8f76222bb09b39576f184ee761eeb85a6a65e4cbe", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770373, "uuid": "6ff38734-46e4-4c9d-a50f-bfdf9f6dfd28", "value": "T1B441A5C7375A4A75AD63851F37A98CE4637CE8F5A0E07911A0FC6DE3815BE102985F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770373, "uuid": "15f7f90b-cbd5-42c6-82d0-c3536f42f363", "value": "48:vWwPoOsWxjoOsWZ8BZjKEoOsWovsCoOsWPHoOsW6roOsWB4VyoOsW7RoOsWM3oOz:vPs4sua2ksw6sqszs4sOsRsQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771770373, "uuid": "c7f96721-8379-442e-8826-d5303fde936f", "value": 2413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770373, "uuid": "24969fc8-3bbe-4db6-8802-68375af4af58", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70dfd962-0ffa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771770373, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "2d66fc38-af37-4368-8218-793fa2e0d798", "comment": "Malware payload (Mirai)", "value": "0573213c01f2c00ba43d9d4e726e71d0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "7b1ecef6-01a7-4453-b444-8bc9e0fd9765", "comment": "Malware payload (Mirai)", "value": "4ba1c5da6b85167b1539b374379d8676fa1787fd332e0e6565fcbbb73189ab3b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770373, "uuid": "cf0eaff2-bbd1-4c5d-85bb-ca76d92b5d27", "value": "T171333A42B22C4E4BF9E65EB0353F1FE083BFE95420F0B584694EEB458535E761086F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770373, "uuid": "b8189d27-ad73-4a9c-a1ab-a65143618e67", "value": "768:1iGBQ9j21i0M+KClRpqhGLka6NtybaEuVwk6l8jbo1OAMUF:P0j21i0Mp6kGIbyNuGlkAFF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771770373, "uuid": "5ef21503-1786-4a74-a7cf-ae805cd085c8", "value": 50588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770373, "uuid": "56a9755c-19eb-4e6c-916d-6f85085e0542", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70f6f83f-0ffa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771770373, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "4b7ddebd-2c2f-463b-9adc-0f95a885bab8", "comment": "Malware payload (Mirai)", "value": "6176f25e04e970e8a8c75374f03c2401", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "5e03e5dc-7386-4b89-8f17-6887c74bf4de", "comment": "Malware payload (Mirai)", "value": "5b6da0770290b88d8d7a72429d15d6fe6f891fadbbd8fb3c0074e4ab781b4706", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770373, "uuid": "f0ee2f2d-ee91-402d-9b40-b50197426dcd", "value": "T10E431825AD792A26C0D8B57A61F78324F2F2224E26F4C61D3C721E4EFF14B4069177", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770373, "uuid": "d842be38-e0a4-4996-8bdb-d6857fbc9582", "value": "768:O1o8uYoq94eDDzMaRTafZPuSqtfTtgN8gUrisqvGgSO+9pOm12:O1nuYoSTDDzMaR2fpu1tfTyN8DgQw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771770373, "uuid": "bc753aba-ea7b-4c34-ae49-b374d3eeefaf", "value": 59332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770373, "uuid": "976704b3-87a8-4a4f-8c1c-43c888c8b503", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9e5527a-0ffb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771770898, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770898, "uuid": "309e8d3d-17eb-4caf-97b6-62347842fb05", "comment": "Malware payload", "value": "5a553e932d01dbdb7c5819c3b77115c0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770898, "uuid": "824255e7-9b38-48b3-803a-71adf67182af", "comment": "Malware payload", "value": "ef02d5463d821d4185fe78f4f7429d54bcd6f245c341b7fe83c30319f7daca6b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770898, "uuid": "ea09218d-1d88-4d48-874e-674dd9386582", "value": "T11C8309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770898, "uuid": "d4a14b28-d918-4235-93a6-b8238020c897", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnfWaLVN/:XEKltp9txAX/yr2pbfWOVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771770898, "uuid": "409f3f29-1f5e-4d56-84af-080e09e185bc", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770898, "uuid": "33f6aaf9-d205-4d06-8ec8-82959dd52732", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd6dc7f4-0ffb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771770958, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770958, "uuid": "f7d44970-770f-4914-a569-a5dbdcd40def", "comment": "Malware payload (Mirai)", "value": "f2c468da7ac3f1d123290d94babdd323", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770958, "uuid": "f0b1e0b1-eb7a-4893-a865-2dd4ea134d76", "comment": "Malware payload (Mirai)", "value": "826f9dd04ba492d80ec7fbc235b01c5ad44d07c267eaf03b51542bc34a98d866", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770958, "uuid": "e4e2c498-d4bd-4198-a8cc-d88d1f35cf63", "value": "T103F35B07F5C084FDC896C1B44BAFBA36ED72F05E1134F26B27D49A621E5DE201B6DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770958, "uuid": "aba92f95-f9e9-4164-95c5-acf98b85063f", "value": "3072:mMBxAhJMJdMj2AZxRlbqZw9jpbiiShhfHsAi6ELZ9hYx1Hr:lHAheXgTpKTOkr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771770958, "uuid": "4f0318a6-a9d5-4201-98a0-25f963226572", "value": 159224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770958, "uuid": "08041d8e-fe53-4a32-97e2-25bba5281f67", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad14baf3-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "6b37e5ce-d155-4f87-a585-a67d19de972f", "comment": "Malware payload (Mirai)", "value": "a99564954a404cbb0e6a0ceda7489410", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "4f516722-2b1b-4dea-9be6-55c7b57cf4f1", "comment": "Malware payload (Mirai)", "value": "ed7d7b625e820d8ad336faaa62251ea03bc155bd5f2a23193ab154ae9212f4a3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "1e11f7de-cff9-4cd7-8f30-5e79e95e2ce5", "value": "T189357D5AF2B371BDC067C030839BCB62A935F47541322D7B25C4DA352DA2EA41B29F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "74f78685-c82d-4a6f-a3ef-ec4bc4191f46", "value": "12288:jp3A2TlAeoYp7tClG7qfnjxvNpTTmyDD2ptJ65kpZSQ+szMbG:jp3A2TlAeF7tCg7qfjx/6pPBZh+sz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771333, "uuid": "f806d99e-389b-4868-8a54-28b34adf8913", "value": 1127456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "e07a064d-5de8-4b5d-a486-55182583a150", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad1ae602-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "d191074a-bf9c-49ba-ad7f-41538fa3a639", "comment": "Malware payload (Mirai)", "value": "6fdafa3e5e4c1752d01564a7cc9fe376", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "01a660d3-6382-4402-ab6f-c84890112dcd", "comment": "Malware payload (Mirai)", "value": "f78c72f80214a258dc7e69c06bc84f3175f69d7b5e49abdbcae67a9c225ca386", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "a231cde8-7802-4534-97cb-fabbeda860e3", "value": "T1A713E12C6E7E54FDF85ED4FE5B7C1B112E4902A960425C0760A5D58A864FA3CF483E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "ec4ca678-2845-4764-ad22-f8612e0e236f", "value": "768:IA2vqoP2Dt4eb/u6phzxIW42kcwk2DztHJZEafJgGlzDpbuR1J7P:IVv122Wm6p9N4owkYtHfdVJuBP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771333, "uuid": "2a3ac061-2157-4254-9ec3-d68dc492bd82", "value": 43244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "d70f1c3c-9191-44df-8030-37e11be94bc1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad2c9005-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "e7393b48-3254-49bf-8918-6dd91e4b30e5", "comment": "Malware payload (Mirai)", "value": "0825c98d7f07289fb5de62fc5a53b9e7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "d93bf86c-ce9e-479e-9878-e9dd2788d36d", "comment": "Malware payload (Mirai)", "value": "8bdba7a223775f6263e5df609095d4340e8e6e2eeec616f4175ecdf281076a68", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "a27285ce-36f7-46e8-b113-1a0785b11afe", "value": "T161D12EF6B486127CDD9FC83A915129BD1189B98B26871D688BBE30757C89FCC2C45D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "07fabe70-0935-4bb7-ba36-26fabca0641c", "value": "192:+j3mBp+OBq6Vp83rSC12mMk7sAIgnAEbPOZRbPOZRwofI85NwDHWGpii8Ur8w9xO:+j3mBp+OBq6Vp83rSC12mMk7sAIgnAEH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771333, "uuid": "761a2322-8584-45bf-afcb-d2c351d1049c", "value": 6359, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "62b1fd05-3da3-4af6-b91b-a4fcd05e3589", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad39cfe5-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "254c9db2-2044-4149-8aa8-48e60c1ff89c", "comment": "Malware payload (Mirai)", "value": "7ef8b07a98579bcf724ae8d13c5a0c94", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "6b0cafbb-7a4f-4560-b087-d111912e54c8", "comment": "Malware payload (Mirai)", "value": "f382191265fb58efbdf592a740f280003d932bf3b647b033dea29d1f27c21937", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "8d78f7ac-7981-4dc4-8d1b-b90a877cd18d", "value": "T11C13F1AA630E46BDC022CAF6D0052590FC72695BD59383AA408771BF9CFFADD2D917", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "d10332c2-fda9-463d-bc57-a7bcb3fd3504", "value": "768:Yq6H1Y2jiF1D/2Dysfw3JqP6upHIc+SQbYqhkCiDCgGmxx07qp:2VNq2Dy2w3JupHa3XgGaOqp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771333, "uuid": "fa5ccf77-5599-4ec3-9122-04f8a67baa78", "value": 41900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "2419b805-202b-460a-8823-91469308865a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad3a7eb1-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "7f493c71-147d-4907-be9d-6362bb268726", "comment": "Malware payload (Mirai)", "value": "5701f991d95b0de0a94a60a50a839fde", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "f3f0386f-ddcf-4bb4-83c7-fb63c92c5345", "comment": "Malware payload (Mirai)", "value": "846e6c1c8801c4d6187311212bfb2451f811934cfa43cff3280ec4fe04480ea1", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "f9e0d76e-1140-42b0-ab2e-a4def9fb8e3c", "value": "T145D0A98E212216302E8A898131B840002880D68235E82F2859EC24E12CC8F683688E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "2e7dccdf-ba8d-4094-af39-39575a44730e", "value": "6:COnFflE0FdjKfQNaKMBndjKhy+9N6dV0XBxn:I0Fd2fWAnd2E+0VEx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771333, "uuid": "aab9c26e-8d76-4013-91dd-cda20f9d8388", "value": 200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "18970b78-9302-4548-90cf-e351fe60315d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad3b2171-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "b6777e93-3f1f-4eb7-b0ef-fcb374fa11b2", "comment": "Malware payload (Mirai)", "value": "df7f4642adf41a85d995440cfe9ad99d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "6cac1291-35bf-49e1-a4c8-2284e3e74cfe", "comment": "Malware payload (Mirai)", "value": "92c7b4ef6daea605603fe3525305f7cc1af6d3338da514940877a92395f122b6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "2d5f04d3-eaca-46c7-a5e2-5761d3517b57", "value": "T189B2D07213C7F663D2B1983BE531824B374169FDE5EE327672196264E8D700B19B42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "7d638b5c-7385-4965-9c2b-1d066069c2c2", "value": "384:y9NxpFFS+Zy7hoQ/vUzLHc9DcEaC5Dytmlkq8f4ZVGK9KZFF2p6BhymdGUop5hVd:QZScaP0zecxC5Drlkq4Mb9o2p6Bs3Uot", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771333, "uuid": "126b52f0-d1cb-4eab-ac56-0da7cfefd758", "value": 24032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "97fa371b-0616-462d-8bbf-6b64aede2d9f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad3c350f-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "18042b39-e2ab-4ec6-95d4-26f977bbe69d", "comment": "Malware payload (Mirai)", "value": "b1ef45b6a4bcf39de13232bb66271d2b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "36663f75-c26f-4430-90b3-20636a801e1b", "comment": "Malware payload (Mirai)", "value": "33040017d8f254824fc8ca72099977ea95d1eb0657f00fe9712ad8fe17272a17", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "af874c11-9847-472c-bfe3-6cf1b15bba2d", "value": "T1EEF43A45F8809F62C5D02576F75F826C73174BB9D3EB720699288B343BD792B4B3A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "3fa50ca2-eee3-414b-ba73-8761047ee3e2", "value": "12288:5i79tc23++NLS1SpDnfpz2dOVyAIKhEPU/TK8p3PKcOAh2mE36vaAFv9:Q79tcuNW1iDnfpKd2yAfKtLd36CAFv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771333, "uuid": "f7db49f0-3e7e-41df-aa92-2eea56499524", "value": 725952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "0fe8455a-0894-4d13-ae3d-2f296d1586dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad3dcf5a-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "4131a341-1733-4174-8ad6-d3f77ce0f5a9", "comment": "Malware payload (Mirai)", "value": "61d13a09a9fdd0ebfc89bb2eca95117e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "855cd213-08d1-45e2-ad52-dbfc8f30deae", "comment": "Malware payload (Mirai)", "value": "9fbd9afe9593e557a71687a9509da9b90788f7a95e0eff7ff79691e3d6bf4673", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "461f6f18-1f49-4b41-869a-4fc81d4580e1", "value": "T1D103F112CEE65E2D97A979766CFEAF4C0854130C8864EF37E6E6386B0922F5019394", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "74faa6e6-1d93-4aae-8668-7e60d9a5f873", "value": "768:wF4H3lUrTc2nLZPsivlGXRRYPyU7DI79XXDvoZ0ipe8Rg+GHdfM9nbcuyD7UHQRl:mY3MPLhbWRY1IRHDgZBKfM9nouy8Hyl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771333, "uuid": "2f15f039-4dc7-4147-a8c9-e3bea3d31591", "value": 40580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "f9432383-e5da-4ba4-9153-ca7c39cf56df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad3e45dd-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "fc9c19da-20c2-4af5-b69b-bd00caead4de", "comment": "Malware payload (Mirai)", "value": "0b15626e8ff376639bf467f9e46e9c8d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "d00eedc6-9b64-4f7b-a072-31561915bc4c", "comment": "Malware payload (Mirai)", "value": "e0aa2740d72df4bf227c0e5313225a116918c57e9b031cc2391fb042384f9fcd", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "30176933-3f66-40ac-98fd-7a010b67d846", "value": "T18DA338D7B801DDBDF80EDBB744530506F531E3A219831F36626BB967EC391A81826E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "e12804ba-37ec-4571-9e0f-0319d460aefa", "value": "1536:Nw3pWv1rOLbQYrLDeXdY1Tr6B6k28IxTLgOelRUepbf2TyNo4SN4xeY3:KLMAU4TOB6k2ORtpLHSN4xH3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771333, "uuid": "1969c78b-0bb8-46f5-8717-f920de388ebb", "value": 98704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "fb1cafd6-fce0-4b3c-a258-70cbdd1770c4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad40f36f-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "d729e0fd-3991-4b9f-9b60-91466d63ac4c", "comment": "Malware payload (Mirai)", "value": "cb91c152f3fd6dcd30df23c15b6e8915", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "9559f7b3-7680-4b41-a4c6-e692c7c00462", "comment": "Malware payload (Mirai)", "value": "5ee6fd11fda468178043f02cd15ca3807cbe4eaf6804bd5f02b91cac41b79237", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "ea1b7e74-dd8d-47f7-a112-1880f1953fdf", "value": "T17203F1D08699C5CAC8BD537828F77D8E05B0F55AE0981E5ABB48639B53C3F60AF45A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "6bfdbc24-1ca9-41f8-9ba8-ba9d38ac5603", "value": "768:IOKap9X7JLYANuIQn5Cav6tm57/b0dy2KK7QtwNu2/q86nbcuyD7UtQRjZ:Iu3LYANyn/S6bIfQtwN8nouy8tyl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771333, "uuid": "3ca19dcd-8a02-4b5c-a0ae-cc5592c99cbb", "value": 40336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "ef9fc374-b76d-436e-b20f-0131f6e05c94", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad4b341b-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "9c12d4e2-5495-4894-bd59-24c6c2d0c09c", "comment": "Malware payload (Mirai)", "value": "e39e7dde0e8cda0b17fed3aed41af225", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "61456492-49f7-4333-bb77-b274506a16c0", "comment": "Malware payload (Mirai)", "value": "4561aedbfca0aed412e8529f61dbe69f3d6896410d4c20c82794349a792c0838", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "accb1553-57c1-414d-8fd2-0d100e35d246", "value": "T1AC03F11CD4770880EB379CB15D855BC27BA10E0D63B9CB95A3B1B9CA4B27B11F52EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "9603e073-e910-4ea6-adcc-e276d31f1f8c", "value": "768:0/O6+gxrsRrDE3OaH/i0sL3XaBwiWHbX7uSTjdmsgRo4uVcqgw0IT:0agJErDVaH7suBwigTjdms0o4u+qgw0e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771333, "uuid": "fb2c8313-2f7c-462c-b235-809de00326a1", "value": 40024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "34e58ee2-9486-4fe8-8de3-e8e81b35c73d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad529c1a-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "97eee134-1d92-4605-9c4f-1fcfd7fa3dda", "comment": "Malware payload (Mirai)", "value": "c9f63e23b8242bdbcd01e6741e2f3125", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "3489f944-f6ac-4cb3-bf5a-322667876eee", "comment": "Malware payload (Mirai)", "value": "5d21226b83aa3cde424e129e75386d594dd43a08ed628dbd41c3135dcf0c128f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "5322f7ca-c203-4427-a9e3-40ff28789118", "value": "T13FC39D87B78B14A0C4624AF013C71F9D6B53A211CE5FE8E3AC1E763F5A7A4DB19163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "03f986e5-b107-4328-ba4b-2208dafc48a7", "value": "3072:DAQ+rDaJ7MbzumvlSZcYKrpxVSoYJgFq:DGHaJ7G9vsZKrB7q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771333, "uuid": "1d70022a-07ac-4290-bd4c-8bf9e39fb58a", "value": 124676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "dac73b58-06a7-4fcf-9c35-db7422a64345", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad566ad9-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "6446ccc0-b548-4b71-a660-e2f0506b8d8a", "comment": "Malware payload (Mirai)", "value": "66a3b65a7797c78f290d39fa0f1fabd3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "dad995e7-58e4-49f0-baec-79fa742bb9fe", "comment": "Malware payload (Mirai)", "value": "6af9813c79842fe9e490f043d7eeceb1bcc35adec81d8dcfae947911ed146a7c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "e6a6c6ef-0db8-4cbf-ac61-10f51c1fe037", "value": "T15B13E0DCB89FB889C99D0CF58592835DD689F280B6856F8F23160D1CBFA280FB5995", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "9af2a37d-f918-4ad9-94dd-ea080904b252", "value": "768:/RZe/ZCbkHnlrbF/8sgZHP+493V38GH5LbkVEGwrfQ+uWSWn:R2UXF+45V38GxPGw0+um", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771333, "uuid": "c4313301-c503-42c2-844d-e59f0b07ca7a", "value": 44060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "f6a8be22-4d0f-40a6-8a91-f3576e9ae186", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad5a25f3-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "bb89b48a-ad82-4097-8e0d-5b0efd422137", "comment": "Malware payload (Mirai)", "value": "b6a4435a2557242f548ae8bfc86305e7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "1ccac2b1-e763-4314-8abe-056a98016312", "comment": "Malware payload (Mirai)", "value": "7d623e46695300ccb07b19e5d9835518737251483ec1dac12fbab8c57d1dfe11", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "432a12f1-f01f-4ec9-97ce-f7a9a9d3fe9b", "value": "T16503F1085DFA9753C069E37336DF39B605548B06F84892A26B907A338C18F5D7638B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "331afc73-2134-4bbe-9a63-19fb5c0785e6", "value": "768:r6axCXJjoBDqRIdfNAPOzv9ZJ1lrVqH5M0eSIBnbcuyD7UtQRjd:TIs2RufNQevxxCaRnouy8typ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771333, "uuid": "1852188f-403f-4649-9a0a-9b05b95d50d5", "value": 39372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "dd973734-176b-4b88-b770-fc55bfc68703", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad5afe8d-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "f3e4d889-8165-492f-b3d4-05b59b031e7e", "comment": "Malware payload (Mirai)", "value": "d239a7b5cadefbc6211b8816a2c7137a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "e4a66803-e99c-47c7-97c0-48c749152a90", "comment": "Malware payload (Mirai)", "value": "7ea46ceb468496df2200343dccffd010c11e944392aeb12fed315613ceb76d5b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "211a8cf2-e47c-47a4-ba5e-49398b80b2c6", "value": "T134F43A45F8809F62C6D12576F75F826C731747B9D3EBB20699288B343BD792B0B3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "1ea6abcd-9165-4c21-811e-ebcc1ff3565f", "value": "12288:c6sAyyIsmq29JGF2n0GLxhbsXoz+2AsDP93Qojl8p3PacRl3AvaAFvS:jsAyyIj9JGonfLxhbKoq2An1a43ACAFv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771333, "uuid": "bb0396d9-f5e0-40ef-85b0-0b4b89864926", "value": 730176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "9566a5d2-b419-46a3-a24f-209d8fda5c83", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad5d5432-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "c44b2fbf-307a-44d0-b58f-84673fcbf020", "comment": "Malware payload (Mirai)", "value": "83463239f1857ab8b9360a43d52efc2e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "60899440-d6b1-4163-94a3-0a4449fc4339", "comment": "Malware payload (Mirai)", "value": "2f1b2de9011fe4a9090ce869ee971ffbed76a92221bed34f918fef7736e6213f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "9558c9d6-62e1-4a76-8e45-fb77374fbcb6", "value": "T114F43A45F8809F62C6D12576F75F826C731747B9D3EBB20699288B343BD792B0B3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "cf75b33b-48a0-45e4-9111-90eea288fcb0", "value": "12288:/6sAyyIsmq29JGF2n0GLxhbsXoz+2AsDP93Qojl8p3PacRf3AvaAFvS:CsAyyIj9JGonfLxhbKoq2An1a63ACAFv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771333, "uuid": "73534408-9bbb-45f6-816b-e959878b26a4", "value": 730176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "936c2b69-7610-4ef9-b8cc-bc9e6c58d27e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad5df4f1-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "3e6f8a2f-5f9c-4ae6-ad98-5b0910d64f99", "comment": "Malware payload (Mirai)", "value": "aad5febd612abd25b39e8aee68d96156", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "133003cf-4207-4da4-ab1e-e47d6a5ae78d", "comment": "Malware payload (Mirai)", "value": "234e296e7f319dba55ea49467e8c3be28425a1ddd7d4343498e76ee684e5d0af", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "acc6523c-27c9-48a4-948f-0dd737939f8f", "value": "T1C46302BDB9282AC5A5315058EDEA0B8B176F3736717E9F913A152B3C92C3162A06D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "b2e29046-b63e-4a7f-8bf7-b264fe5939c7", "value": "1536:QVEWVnm6zBOpwwFH7cpoKseLQWLqdFisFYRLCR:QV9FwpwqH7cpouLJ4laR+R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771333, "uuid": "d5632219-5119-4ebd-a801-8771942cdd37", "value": 67036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771333, "uuid": "5ff5655d-4294-48bc-99c8-58bba33b27bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad6257c8-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "4a0716fd-9141-41c7-8314-2893f946c140", "comment": "Malware payload (Mirai)", "value": "340be7a17cdafe24bcacd74d1a4f5c81", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "e2562edd-1f22-458e-b0ff-c5d5dfdfefe0", "comment": "Malware payload (Mirai)", "value": "7445d99bf22ba85941422f08ed5d00411b34366cb97188c2ba0f08d07242634f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771334, "uuid": "4dac9044-10a4-466f-bc64-86d7c10d7560", "value": "T1C313F111E8876532B661B830DC73069E7CA56D3DA05F203915E5C3B83B53E16B8BB5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771334, "uuid": "d41d7984-706a-4a08-ac9f-5317bddc1317", "value": "768:iF4H4deo0G4I2nB/HFJvlJROGzJ5P483SdF5VEjEywzC4Rn1JAIvU9q3UELkz:G41B1BfjHROGV5Pl3SdtEhwwIVL4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771334, "uuid": "f2b8cb2f-a302-421e-9ae8-3d9633a506e2", "value": 43784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771334, "uuid": "a29adf2c-aeef-4e36-aaca-3a0c5f2cb232", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aea16a21-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771336, "uuid": "ba8c90dc-bfc2-4d15-85fb-349d29f676e3", "comment": "Malware payload (Mirai)", "value": "ac275ed37855fe9914ee95a0a614a8ea", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771336, "uuid": "2a64c984-a6b7-406c-8a60-463cab79bccb", "comment": "Malware payload (Mirai)", "value": "4e3cb6b19d5f76b471042b5647355e0ab7391a8bf11e8f1282f43f9e09ffb9db", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771336, "uuid": "d444773c-aaa5-4a2f-b632-fbc64697a8c6", "value": "T1940184CE216556372B6D4E94BAAEA2485980DAD236740D24DA7408B36CD4302779CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771336, "uuid": "8cd654a3-a350-4faf-9bd1-ca5492a477ce", "value": "24:3J3n2snW20H2TNIfK2zKlF2FtBs2Xh2Ve2h2gV2Zs2C2Sn:MCB0WklzUIlbXE/EgYZbdS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771336, "uuid": "fd1dfac5-d865-477b-b6e4-19fd5c04b302", "value": 788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771336, "uuid": "d371fb65-590b-496e-a95a-c4f6abbca507", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aeadd8db-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771336, "uuid": "77de43ce-7eaf-4b4c-8a47-87877c194054", "comment": "Malware payload (Mirai)", "value": "869777654173a2d8202df12b853167bf", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771336, "uuid": "58d047dd-f63c-444d-a572-1e6017736bda", "comment": "Malware payload (Mirai)", "value": "ac8252ed014d64351f428943cd9a31ef7a716b2438d8aba8d84983ec0c23c7bc", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771336, "uuid": "7520fce0-d81e-466f-b9d8-2e5871a47124", "value": "T14183AD73C86A0D28D44844F0B0A4AF3597A3E116C5972FF6989AC679D08BEDCF6423", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771336, "uuid": "eb6146b1-575b-426f-b4b2-cec862c140d8", "value": "1536:mcJrLx5PZB6AQezed2ujKeB2np24ybCn8FH/Smpg:msLxYOz2NGe024yb1paL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771336, "uuid": "b6bd890f-f991-491e-8ed7-7e79c8b86f87", "value": 81160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771336, "uuid": "e424e8cf-ae57-4e69-878b-c83c6dbc7c1c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aed2fcf9-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771336, "uuid": "538bc384-b536-413b-9c88-e0e59e29d108", "comment": "Malware payload (Mirai)", "value": "a3cb2fa1461ef604099a184a971016b8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771336, "uuid": "f43108d7-4e6d-464a-81ea-ffd359ec2995", "comment": "Malware payload (Mirai)", "value": "4e2a2a63f6d4206ea52688df473548e19b360ce9170a7aabea227a2a5d05d0f0", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771336, "uuid": "cf77bc20-5000-47b1-837e-32de3218da83", "value": "T16B03F111E381DC7CABB38D76DAAD0883D3DA6D3846F27577B902D054B680D0915FB2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771336, "uuid": "775f1d75-a920-4015-8c71-a4b52352743d", "value": "768:+BQJo1T/oM6u+j8mjfA/lvywafEzTDpxKc7VPbKzhKND0s3Uozw8:+BCop/9TpmjrwaczTD7dp+EFRzx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771336, "uuid": "90fa8f59-8185-4074-b748-0761aae0c66d", "value": 40952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771336, "uuid": "a54ab501-dd23-47f1-b116-0948fc4e02d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aed3d921-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771771336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771336, "uuid": "24d9f6ac-a203-4601-bd06-dc216650f374", "comment": "Malware payload (Mirai)", "value": "db39cf1c31c6e3f00ae327050b710603", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771336, "uuid": "b3b8c4f2-693c-43ed-99f2-b92ddd94db43", "comment": "Malware payload (Mirai)", "value": "5bbc4a44267775d5268c97ae7a036d330cab86e85908b942ae1feefa7bc4dd09", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771336, "uuid": "37647ae2-c886-40a6-bff4-cb35df09edc4", "value": "T150935C22FA79193BC4C4A87762F34726F2F6434B24A89A1E7D720D8DBF1465022977", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771336, "uuid": "8bdcdaa4-b231-44b7-a966-26223faa3ad4", "value": "1536:GimLxksVEmbNzO5eIgmL0LkOUxYA6tJlaq5u0qQ7Z5t83Sau:xW9OiHUKDla6uP8au", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771771336, "uuid": "9408d32a-20aa-443a-9cc1-a2277bd35f52", "value": 95056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771336, "uuid": "6187a5be-e7b0-4abf-adb8-f8a11329513b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebc5f019-1003-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771774445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771774445, "uuid": "4c777a8f-73a0-4c3c-ad5f-2956ed63cb3d", "comment": "Malware payload (Mirai)", "value": "c01a6c5f75c7cdc6291818c7a2596add", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771774445, "uuid": "e5d57972-d0d8-4776-a81f-654d142e9c65", "comment": "Malware payload (Mirai)", "value": "2e882071aaff08463538f1f829477e7cbd9b10548b11c3cdc881cea06c746850", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771774445, "uuid": "34de7f77-4e0f-4f02-8e4a-88c00fa244da", "value": "T12CB36CC2F743C0F6D85304B1507BAF369E33D4BA5025DB42E7689A71DCA2A05D71AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771774445, "uuid": "5c4c99d5-3ed3-4b51-afb2-e0c0fc79ee77", "value": "3072:EPian1DTJGm4EgPw55RP2V2Zsv1hIB18ee:Eqan9mCukZsvoe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771774445, "uuid": "c8068397-fb47-45a4-b19c-345e3fb717f2", "value": 116168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771774445, "uuid": "3885ed41-d939-4ec2-ae8f-696f41ba02eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e7b9129-1004-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771774583, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771774583, "uuid": "dff71dee-97e3-4b1c-b485-0218f5b24b63", "comment": "Malware payload (Mirai)", "value": "130f62cbd62e7926a31afd8dd35968e7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771774583, "uuid": "3936bb3e-5641-4f15-8bb5-036a0fd226ff", "comment": "Malware payload (Mirai)", "value": "e0e634ceaad091162884be235054d332ae422e84713145b8c4f2c55a4172b487", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771774583, "uuid": "b0443c3c-f739-4dc6-b88b-f03fbc41c2c7", "value": "T124F31A56F8818B16D5C211BAFE1E124E37131B7CE3DE7213AD246B707B8A86F0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771774583, "uuid": "d5f603c1-1369-4e0f-acef-c55dfa9337b3", "value": "3072:+LhJ7HL7ZQvlA3dXro3rOwaS2Kxc9+VJMVnLmxEYC1P6hh1Zde:+LHLd0lEXrOTaRS7VJMtmxhYYde", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771774583, "uuid": "48a0e0f9-7a63-4be2-b004-ebcf34012fb2", "value": 164636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771774583, "uuid": "11a9e177-abf9-4b50-8ddc-bf11ec16509c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57fc568a-1005-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771775056, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775056, "uuid": "e6d52e49-116a-4c3c-ba4b-62941176d9ff", "comment": "Malware payload", "value": "2cd377a5218fb880fa479bc86f0f368d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775056, "uuid": "39d12c56-98e2-4ae2-81b1-7d7aa9d05257", "comment": "Malware payload", "value": "81fc53a74d746478aa8c15f56a85f3e51158a0849bf0f64f2b9c6aff90f99aed", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775056, "uuid": "4930b253-1c57-4ffb-aa92-e06cf81a1a8f", "value": "T17732D77435F14C333A616940B3772BA2ABB7D95345A3218C39DE2E265F87B12B4BF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775056, "uuid": "6dc4f8e7-a394-45b7-bb3a-d771f446ef8b", "value": "96:cLuKB63uxu+SEgI45+fIBVIB7IBMIB8IBrO9F7S+vevGvNSJCqArXy5vR:cLuu6Yvk0ewPzi9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771775056, "uuid": "5985c4ac-c0a1-4418-9ba8-d0cef6cb1464", "value": 11676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775056, "uuid": "63f2023b-9773-4958-a7c8-3681040ebe3c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0657b7a6-1006-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771775348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775348, "uuid": "637f3535-055b-466b-b77d-0f1ebe0f001e", "comment": "Malware payload (Mirai)", "value": "20745159f268196a4e741caaaf93bb7f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775348, "uuid": "0632edd2-684f-4ab2-a3e0-550c4f4cd5e1", "comment": "Malware payload (Mirai)", "value": "a53ac1aa5a78b807c75e4f29083f8bce4a8c44a940eb8c9d1c1835af0ec09430", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775348, "uuid": "3c70dad1-8226-4af0-9837-72a3422be3f2", "value": "T114F2E781B8C25A2BC2E423BAAA6F518E336173A8D2DF7717D8111F107B8991F4D63B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775348, "uuid": "d5705abd-da49-4357-bb2a-388a1dedc955", "value": "768:nPQoxXK9zq3GVKWKKNOo2TfCOjfdiGswrxfE+MyiL+:pXYzmGj2TZ5IwrxcTL+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771775348, "uuid": "e7d7c191-0a71-4fdc-a652-bf019c12a09d", "value": 37108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775348, "uuid": "a65748af-c8be-43af-8fe1-be3900e07bb7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0658f453-1006-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771775348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775348, "uuid": "63b4e2fe-dc7d-4861-9efd-f543a04e36aa", "comment": "Malware payload (Mirai)", "value": "341b80250dc371ffb13aa0ccde873d0e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775348, "uuid": "c0511b46-e9e7-4e46-9f9f-aed1bbdec25b", "comment": "Malware payload (Mirai)", "value": "ad3ac83dde69091d05f96343db6fbbb0acdd262f8d7ed4069bcfcea044164f94", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775348, "uuid": "8d25fe04-0c1f-44d2-b7b7-528d53de4a23", "value": "T10BE026801430D81B0E80480DF111CC9DBC4EB0967DD20A1C6A4E8AA24BD6FE830457", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775348, "uuid": "6a3ab974-3630-4b1b-b030-e6cecdb03ec7", "value": "6:tYM3FicfVQgNUzFGaQMVeMTyMcIaoef1Jf7FKiE5TZHhyMVeMTyI6Iaoef1JfN:Mcq5GcVkVxoefDoHBxVkI6xoefDN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771775348, "uuid": "cef9a3d9-a9d5-4ff7-9238-97506dac1f9b", "value": 333, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775348, "uuid": "edf44b03-5ebd-4100-ab00-4cd89183fdec", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0661ae6c-1006-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771775348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775348, "uuid": "bc239067-1b55-4733-90fd-76a6b3a77a53", "comment": "Malware payload (Mirai)", "value": "60144d30b4cfd0ea9a08d19cda54706d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775348, "uuid": "c7aee0c1-60f8-4808-98aa-54a796a396e6", "comment": "Malware payload (Mirai)", "value": "1ca2010aee618f540e8a5c12fef537d9860b0f72ea2bd429653490cabab90267", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775348, "uuid": "83763e1c-a55f-4b6b-8131-dee8f08b6e3e", "value": "T144435AC4AA83D8F7FD5700750133E7B746B2F4351129DA97C7A9DA22F852A01EA272", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775348, "uuid": "34966bc4-bc87-425c-9273-1c57ea1e72d4", "value": "1536:neG9qPt/0+NvmIL9M6/S6sBDsGseeVRdlWKga2a9flKS8:neG4l/0+Ne+LK6FeaRLW3ZaQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771775348, "uuid": "0e6e004f-210c-46e1-a8d9-6b957dcc9a59", "value": 58928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775348, "uuid": "0176ec1e-916d-4e39-9317-bd12ede201da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1771775348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775348, "uuid": "e94f9fda-e9f1-4b27-91dc-5222f68ffcfc", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775348, "uuid": "f9c9f521-11d0-4209-8ba9-e262990938de", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775348, "uuid": "29f77892-7337-4c72-bb9b-42c8fdadcde3", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775348, "uuid": "73d89b34-1246-43e3-864c-da41c163644f", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771775348, "uuid": "a1d2f50f-51c8-4197-b0b6-d873577a5d17", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "067b0bdc-1006-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771775348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775348, "uuid": "1a9c890c-23dd-48b2-805f-7224c7f94911", "comment": "Malware payload (Mirai)", "value": "eb257bbd53953583d01e02e60d25d614", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775348, "uuid": "a0d4aa09-1ebe-4333-9570-d1bd052d49cc", "comment": "Malware payload (Mirai)", "value": "885ad6bc703cb378f721f08d5da7ed452701ca8763538ce947802618043e1223", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775348, "uuid": "0869ff58-3659-4773-95f3-8f306df3ddf1", "value": "T11D93D506BB650FFBDC6FCD3746A9071239CC550A22E93B3A3634C91CB51B64A4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775348, "uuid": "fb09df7e-3575-4938-8700-331be80f9417", "value": "1536:lX1tMe0R/thi3+ZEzngaLiVw0FmWnM9kyXZLHLQq7V861yMRVz8Z:lltMe0R//FE15Wn2XvJVVQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771775348, "uuid": "b4158d70-294b-401a-b131-753f5e3d939e", "value": 93464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775348, "uuid": "0817932f-d4b4-4661-8592-5700a0e305a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "069dd78c-1006-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771775349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "1f48970f-65e7-4030-877f-4b8e14d6d44d", "comment": "Malware payload (Mirai)", "value": "259ab0277c9b02c032abf4a1ed307096", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "3cc23375-ebf7-41fa-b209-578cd56dfccb", "comment": "Malware payload (Mirai)", "value": "6d899f48f3741dbf23de4164485737d0b5bd0268b3cca2460a8a6d5fdb99911f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775349, "uuid": "288878ef-757f-4331-8f2f-1fac94bfd373", "value": "T152E33B46E7408A13C0D6177AB6EF42453323AB64D3DB73059928BFB43F8679E0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775349, "uuid": "0992a19c-6bd1-44ae-98d2-eb9dac669adf", "value": "3072:qNuculeEaMTzbx8PhGWNFYX7QCK8E/ZL1JuM/900S:qNu2EaMTzbx8PnNE7BKHxL1UM/9tS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771775349, "uuid": "ad434241-d30c-44ad-8e89-319d0596270d", "value": 154311, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775349, "uuid": "dc2f6373-343b-460f-8fa5-cfd6a91fcb1b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "069df9bf-1006-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771775349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "4306b77c-91fb-4ea6-bdbd-a3b15a9eb77c", "comment": "Malware payload", "value": "d7af8b342366c75ae614a90abf19c735", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "fe24937e-d0fd-4e22-bb2f-68c1371651f9", "comment": "Malware payload", "value": "74d238dc22f3ef07959d5298272f319145f244f692985ad76a8fefa38e9207f2", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775349, "uuid": "0f0ebfbb-9e45-4a03-bb93-41b78fa3b414", "value": "T1C021412E150FD3684AB60259F891752FAB65605F1E1060B9BBBCE840430433C03CD6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775349, "uuid": "d0ca0c94-4838-4311-902e-691f7171dbbd", "value": "24:KmzyKpa/u4n9ohKU9iBB5u+paOMo8R82+/3AX/pka8uzWpH:KpQa/ui4N9iBBQE11Z/3AX/KOzWF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771775349, "uuid": "fe9458a5-4843-4b3e-aa40-48546c29b267", "value": 1171, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775349, "uuid": "8bc26ca0-a466-480c-b10b-a28b9afe3415", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "069f16a0-1006-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771775349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "cc14ed06-0631-4d74-80e8-56b6dfd5e912", "comment": "Malware payload (Mirai)", "value": "a649911068d4fa4dabebe4c9ed4e40bf", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "208a53f7-4b02-474a-bcef-134145c769f9", "comment": "Malware payload (Mirai)", "value": "9915a16407319b55f2cbe670f1e2f756f832f54ee4e1a85272a351b1e77ab685", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775349, "uuid": "3591cb5f-7f9b-447d-a037-432da60869f0", "value": "T13D731995B8818B22C9D512BEFA1E118E3313177CE3DE73129D206F24778796B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775349, "uuid": "db29e8e0-a314-4058-8c03-efcdda4f6ca1", "value": "1536:TAnB7Xm2yKiCTNpoutSaH2NjTQ3MFiP+C/lw17IP52YMd:cW2m2iutSaHR+C/lw1kP8j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771775349, "uuid": "a9df5286-bc3c-4003-8589-cca7da8b0673", "value": 79324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775349, "uuid": "6eae3ebd-4430-4598-a461-e5d4683e0f8e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06a6d92e-1006-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771775349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "c0165770-703b-483f-a26f-a0dfff6cd9cb", "comment": "Malware payload (ConnectWise)", "value": "454177682f738a7b97db6c78364b2fd4", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "22a9a605-6362-40f9-83ed-b13c66c2fa96", "comment": "Malware payload (ConnectWise)", "value": "594a69724db412ad577ddc13ee0be3f9254c9ef528bb863da49733578191db61", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775349, "uuid": "27169f4b-e8cd-4df1-baae-b2da3a6f1fb4", "value": "T1F121CA0F5D37D277D7462124F502811BC278D03BA588902FAD66F0F19CC60657B979", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775349, "uuid": "38b4dd4d-90e1-448d-856b-5437aef72329", "value": "24:9ai0iAiBreoq+gWiyVwibs+C8Ut5G8NoB6H9sFSRJuB0iST:9aKAAreoq4O+NBceXw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771775349, "uuid": "7a351def-280a-45e6-8867-b3cabd4ad0ca", "value": 1152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775349, "uuid": "f51191bb-a710-4c30-b5ff-7653ff240be5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06c93c9d-1006-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771775349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "af1cc85f-238e-481b-b798-fe9a667e46e2", "comment": "Malware payload", "value": "28900c28195201a3559472230bb012b2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "207fc3c6-e23d-4a43-9205-5a3567238c65", "comment": "Malware payload", "value": "f4fbdd1877e4ab82978a14474e0c823aa7ac8dd7bd7fa6b23ce9a20dfe47fda0", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775349, "uuid": "2f03b50a-f6c8-4c11-9332-f08911481bd0", "value": "T138F3129055201D95F048B0F2636335A5063DE6B143AFEB5E3BB3A23C3DD9AA54CEB7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775349, "uuid": "85477c6e-d563-47d9-b646-81d6d604819d", "value": "63ef7b39c5b13c332cf9f67aa8171bba", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775349, "uuid": "003fded8-185e-4c27-a71d-54fe50688f98", "value": "3072:Vo/lri4GAA94d2glr1Ap87V4g6Duv6Thx9iw7xe1AqBRqNGuVfJExk:e8d6368tv60seaqBRqNGsJE+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771775349, "uuid": "5a3e28aa-7ad6-452d-a4c9-064eb7fb8f68", "value": 168813, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775349, "uuid": "16638568-e790-4886-af09-865d864fa6fc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09e4db33-1006-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771775354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775354, "uuid": "1d43861c-17b0-47f6-940b-4b6181364489", "comment": "Malware payload", "value": "259b42d13d40a8dd91674a74949dcaab", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775354, "uuid": "952f2fba-d150-4fae-b445-b4ec84e60542", "comment": "Malware payload", "value": "3be3e7a45994dffd41af96f3b8852674272e6dbaaca2dcd0b84296e136a9c6c5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775354, "uuid": "081de369-454e-4cab-939f-855d2ec72e80", "value": "T1ED662321BA838036E95B1E30753D9A759B3DFE345F64B0CFA784382D5E316C05B72A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775354, "uuid": "128e6dd0-e170-41a1-b461-80f81ac9f9de", "value": "196608:flc4PxNgvXPtj+zc5il1FiaRg9MRuGWRHZB:drr+/tj+QITFic+MRRWRn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771775354, "uuid": "ce79ecb1-65e8-47b8-849d-eca456ec42ff", "value": 7118848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775354, "uuid": "cdf89007-c4c7-4ed6-8df3-00f22ce70bb6", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09ecf4c7-1006-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771775354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775354, "uuid": "39b7104e-0728-4928-872b-bfee95ccd0c0", "comment": "Malware payload", "value": "55aabe1018c2008524e05b08c3eec6f5", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775354, "uuid": "ffe59073-80d2-43a5-ba7a-09e1da1a7f18", "comment": "Malware payload", "value": "ef7d3d7481359435d297b9cce6662d5f8f8b6a6c54bf08eabbcdbb3286fe6f59", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775354, "uuid": "6e1322fa-73c8-4795-b433-f26d3509a9e4", "value": "T1E9D6239FFB585B2FC8B304320D5A423127278E16BA43A6075858762C2977ED85F8B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775354, "uuid": "73b927e9-5061-4dcf-b4aa-fcbc776ffa6a", "value": "393216:rQLvqzWQpoygOnIittMfuBcZxpPJbm2/Z+ukL:rQLqr2ygOnPLMWBOpP5m2/ZjU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771775354, "uuid": "3591ae9c-36e8-4850-9e13-aa139e5c0533", "value": 13100782, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775354, "uuid": "56aaeb22-7669-42b8-8f95-2831545a0fc9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a2aa459-1006-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771775355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775355, "uuid": "eeaa1d76-bb24-47be-9bca-6acc9efa50dd", "comment": "Malware payload (Mirai)", "value": "dcce3aa15c9b3cfc263fc273c6e4c62d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775355, "uuid": "15917571-e531-4883-8e6e-02c01b886c6f", "comment": "Malware payload (Mirai)", "value": "a9a1bec82293228f65072c95a12a53edc08a3602ed40aa5e15fc2e4fa891d4a0", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775355, "uuid": "ffc0c448-65d9-4cf9-a43f-d791c93477aa", "value": "T1F803E1119B6518B3C8B0253FC9C50BC2FF2B2B7C51A67A23046957A83DCA5D169B39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775355, "uuid": "a8565833-3b40-4f40-b0bd-7a77356bc269", "value": "768:jnq6CSA+gICyThftXfSyzgEVQOR2FM3I95twxqKL+NMGaAbC1ozWQY9q3UELOc:jnRdA+g25tfSAPVQOR2Oa5OxqKL+NM7i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771775355, "uuid": "08b24bfe-c79e-429c-bbb2-3de0141e6a39", "value": 39200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775355, "uuid": "fe96cfc0-c93b-4320-84ed-a56e4d35025b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f32e411-1006-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771775363, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775363, "uuid": "aba91111-b461-44a7-ba21-e72f71aee4c5", "comment": "Malware payload (ConnectWise)", "value": "f277a3aa0d394e65a2b5a4c49c6e52d5", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775363, "uuid": "65693038-06f7-472a-b796-21a218d644b4", "comment": "Malware payload (ConnectWise)", "value": "a44596d3be667dea9150d40d5ba4de6eb05f9624b39f8fcddacec6c9b1412004", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775363, "uuid": "02cef06b-9743-4384-906a-128d092a29e2", "value": "T15CD623116BF89678F0F22A35E876A0B1A5377D125E22D12E2324791E2C75EC0C9B37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775363, "uuid": "8a8c015f-d2db-4333-98e1-dc1c18de57a2", "value": "196608:yHxcp9ym3nltDUJVFHxcp9ym3oHxcp9ym3RHxcp9ym3XHxcp9ym3HHxcp9ym3aHH:AGplpmGp2GpDGpBGpxGpoGp4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771775363, "uuid": "6d59eef7-ee2d-4438-b2da-7224f0330f19", "value": 13438976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775363, "uuid": "10d85e05-9ce1-4a82-80a8-ca1709e39f04", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f5dd87e-1006-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771775363, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775363, "uuid": "6b44725e-1b32-4381-9a83-ce2f553cf5aa", "comment": "Malware payload", "value": "da6cadbdf4b2202c20f6f73027a8d86e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775363, "uuid": "f3c9f1c7-8d6a-4e5f-b9a7-e29caabed2c1", "comment": "Malware payload", "value": "b1833409c581ffcecdb29e9ebaed307a756d9faa37a2f0c16ef4ef045a5ab602", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775363, "uuid": "b729e097-7219-41b6-922c-9cd0ec8c7017", "value": "T1D8F6333EC328958171B50276B81F285721B9FD424954E00C99EE778F2D63A6DBF2CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775363, "uuid": "571ad55b-ade5-4e1e-8d52-f7bdb56a1ebd", "value": "393216:W43FcgK998PXRPzKjC7OaH5iPBp3CZ5ti3:XVckPpeCaI5mX3CZ5tW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771775363, "uuid": "ff02ae16-4192-44ce-a2f8-c17d486017e3", "value": 16046473, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775363, "uuid": "8053b428-cc89-45a3-8e2f-1a29e1f3da7b", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ffbda48-1006-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771775364, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775364, "uuid": "7ce16bff-6e8c-4888-af3e-d0400cd68c15", "comment": "Malware payload", "value": "950f47f5da4d9e8ef202c8ffb5950c22", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775364, "uuid": "f3548fdc-87bd-4b30-af14-da851a337769", "comment": "Malware payload", "value": "e04ef421c1337398d527a3708ea0f87353486aafe9d4560d22ffc9b59562e28e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775364, "uuid": "0ac0e620-be63-4454-a8fd-e837111c802e", "value": "T102C733863E49CC19F0260B39AB778195F5644FCD5502F4EFA458BB903EBBE805B01E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775364, "uuid": "4fe47c8e-96ec-4fe2-9ab4-7d9d3f39db03", "value": "1572864:+jEzikGSi58H03d7v1efc9xVCgQiaYRqSjc5:+jIiENc9xVt7aYIQc5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771775364, "uuid": "d3ac6552-fb15-4282-887c-9794a2ab26f6", "value": 57622331, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775364, "uuid": "3d9769d6-7614-4415-a0d2-9f41c744103f", "value": "application/java-archive", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e3a8206-1006-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771775388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775388, "uuid": "15770a37-835f-46e6-a5aa-216125d05b02", "comment": "Malware payload", "value": "e1c777ae14befb3dfd5662ba78ecde1f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775388, "uuid": "08b44365-f882-497e-900e-41421e1c290f", "comment": "Malware payload", "value": "65a70bd05096e971485da4c91e11018edf114856709098147bbfa800cc025583", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775388, "uuid": "67826fcf-4b05-439d-915b-b494e6e50f14", "value": "T1E1E72263E7589DE6E4FBAB329275825661134CB05B43EBA26D11707C1DB3DC0C70AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775388, "uuid": "35972069-6578-47e0-87fc-32f2886e00d4", "value": "1572864:/9FrQ/7p3QnAv4FlSM+1cOzidWs2CHBbZPPJGENken2oby37VEt:lF8/7pIk4FlSMTeidSQbZPPJ512oWx8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771775388, "uuid": "e4e9f352-8b21-49a2-b9b3-349e597defbe", "value": 70077416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775388, "uuid": "36cfb9ba-a5fd-489d-af54-9d2a3f11cd9f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26b6c764-1007-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771775832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775832, "uuid": "4d65b97f-9d92-4f9e-9ec5-68c56f5b26c1", "comment": "Malware payload (Mirai)", "value": "49e46ae67e4f502c72e8adfb01d2394a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775832, "uuid": "9a9769ed-ea8b-4161-95ca-0041cc100e3b", "comment": "Malware payload (Mirai)", "value": "1b508ca223c4ed4d8c3df925ce36f8a27b529e65023c6f7805c3c4124c58e6a3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775832, "uuid": "2bdb2201-9eda-4a25-9e58-c1e63e0793a1", "value": "T1C214D71AAF520EBBD8AFDD3302E90B0139CC555722A47B363674D528F54A54F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775832, "uuid": "cf9fdff0-9fa7-4875-8c7f-3a47718437d9", "value": "3072:x8ntMibJebE0IEJVxqGMPLOh33Mjk2E61A88B6hh16nK:xICibJKDIexlELOpgc2A8on", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771775832, "uuid": "d32662ba-8014-4647-9932-af061335e7bd", "value": 201184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775832, "uuid": "978f0881-5a3f-4425-adf9-e98bad0db3b9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37e93733-1007-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771775861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775861, "uuid": "14998a49-1e32-4f3f-bbf2-0e6cdac3f62f", "comment": "Malware payload (Mirai)", "value": "5d08ee73c89c626f61814124aa69d4b6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775861, "uuid": "fc58443f-d096-4841-a713-f12d0baf0519", "comment": "Malware payload (Mirai)", "value": "be0c40749c9942a0388decbd8616ba0a8715819923afeca1d7d9cd03ba22b340", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775861, "uuid": "9a41e2bd-9eac-4a25-a0d6-40c7b9fb1200", "value": "T16DE31945FC414B67C6C212B7FB5E428D7B2B17A9D3EAB2039D255F20378B85B0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775861, "uuid": "98b9a4bb-6fe9-4904-98b2-120ef587545f", "value": "3072:EquVG6Uy9Um2HcNbw4uFvlE9dpxp4Z6EQ6hh1xI:EquNUyGn8Nk4adE9/L4UEpI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771775861, "uuid": "61b4aba4-5983-435f-9d04-fef2a6fff4a5", "value": 151072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775861, "uuid": "d983b0f3-69e1-4859-abb5-7271fa8cc388", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f246a11-1008-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771776303, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776303, "uuid": "a957f7c6-c62c-4eb5-8b50-1176f942ede8", "comment": "Malware payload (Mirai)", "value": "7b6638396db3a5cdb99c01b4394bc94e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776303, "uuid": "a97e33f2-2b22-486f-8f57-4f0e96255ab6", "comment": "Malware payload (Mirai)", "value": "bbc7cd8937f3e749f162870b0e139e39f8ad64b146c76a0d784ee0009551a034", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776303, "uuid": "475d0865-4976-4c77-97b7-e78c50085d96", "value": "T118E2E1D646B7A8B9CEB10D7BFC630A4D252DC6FC86FB112367F4372427B19964AB00", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776303, "uuid": "adce4e56-9253-47b1-b973-545aa2b3333c", "value": "768:x8Lm6COq1fewdHy62pud4yNOYSOyB8LrC9q3UELdO:iLJCmjpkcMKUTLg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771776303, "uuid": "8430ae8c-5064-4e0f-9ff5-3b66823c4970", "value": 31864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776303, "uuid": "c5bc9de5-e59a-4c52-8cd6-1e78ea0ff4b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b6a661c-1008-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771776323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "f0511460-def7-4fad-8ab3-33ec952632b9", "comment": "Malware payload", "value": "21c9809f80e4b30a4dfe8ff060e6ad42", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "366f6143-20b0-4eac-8e19-798733320afc", "comment": "Malware payload", "value": "ac82ffa5ef705a7e8b2f5a2890a859ffe63f30bc0c92c3ce0a268fbc03279e7a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "1b562b0d-3804-4d17-95ec-2f3796ad4402", "value": "T108C3F1C2E99281F5E2430637089FA75B9BB59F370018DBABD34C1F1579A2797981E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "fb62cef4-f821-46bd-bea3-aa7fada73e72", "value": "3072:rOlNTZa+Ef6jFjeiIal3uGtRrRuhJ8zeK82rpuRsiY6TE/t+:aPGfcFjeRal3ntRQXAeerQRsGE8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771776323, "uuid": "1b2fa276-6ce9-400e-b9c7-030444342da0", "value": 126963, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "fae413f7-2678-4bb0-9acf-05f7685d80fc", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b75f895-1008-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771776323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "2185a524-d796-4ef2-85bb-cab4f4ae2910", "comment": "Malware payload", "value": "fd33b8bfcb90b785b9ed2ccd1e8032c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "690b6b35-a02e-4602-9eba-83dc964bea62", "comment": "Malware payload", "value": "c842452c943346cf0501dafd913f5f891f68c679f7312a9a640156c67c4f1af0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "6b7fce08-62a5-4784-83c3-971666b8d08a", "value": "T18DD3BF61F645AC9BD91442B15431C6B00750ACE103F7A2CBB4AEF3BC4AA7A907DEE7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "1bdb5a8f-a1f8-4ddc-a768-f3ee205c6b2e", "value": "3072:zJy9aU5REflNsK7ZMmvnp5pAi65ffAzcN3njq:VApcflWUvfpA3AzcNm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771776323, "uuid": "b168ad3f-cba8-403e-8f6b-d4f183195d21", "value": 140111, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "9dc90e11-3eac-4ac3-b191-4a977372c91b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b7eda20-1008-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771776323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "d2f21411-8861-49bb-840d-99719aee8105", "comment": "Malware payload", "value": "930741b69505a58959a8aa4ace75aa28", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "6eec3fab-ae17-4acb-a2cc-f69e3df29cbe", "comment": "Malware payload", "value": "d5712e8a2bf6b885a300cd15ad9f9dac7a2c2e6d367c5256eedc18b613a0176e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "8384c54c-cb37-459b-8155-aad520231d39", "value": "T166B3F116E18120BFD56BC275468F9B37B77278D43254AB2B3751F9332F27EA0264CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "2254e717-db0c-4cff-a1e1-0a00495e5d4e", "value": "3072:Nov4QV8UqUc4Abi75iZf2/xUax1bDe0eEQHf5+MFq8pqPLtmN:Nov3OUqyAbe8qfe0eE+f8l89N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771776323, "uuid": "3aef10a0-2341-4c1a-bb43-3c1cc3c2288c", "value": 115539, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "f05f6c6f-40dc-432d-99d2-40c7523a0000", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b835f17-1008-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771776323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "e6546ad1-a62e-4466-be46-a21b642fef7c", "comment": "Malware payload", "value": "c8bebe85c93818d4d380a06642d84021", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "e9b7417b-e99f-405f-b9f5-46e24436132b", "comment": "Malware payload", "value": "adb969e83441f6451f4d4f2c855b5843e96c52ec0beab27fcb39cd4334ad4128", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "74bd2d7f-f91c-43fe-9df8-4da3cf483ba3", "value": "T1B3C3F100DEC6A4F6D6938533208BC7CAEF35CE610551CB53F7446B29ACF1BA6901A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "7b466f06-f212-4255-b49f-9cffc3847238", "value": "3072:qa3z5a9yc6DpBlsoa3/FGbfy9rfPpfkd+SoAZHR:qqm103ljavwbf+jVkd7owHR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771776323, "uuid": "cd3c7482-a60d-468a-8ecd-5a37a718ac43", "value": 127081, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "59b8c6ac-cea0-4523-a2ff-f77fa3f5d2f7", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b86da22-1008-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771776323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "ffe8e95e-6015-49e8-9ca1-53a046f65c8d", "comment": "Malware payload", "value": "ad2757938222d320d532bf75cf223d45", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "e2c5ec93-6534-42c2-9d91-49c22a7fca44", "comment": "Malware payload", "value": "4d9a4332274f1433368583bb0890fe2ac52c2b30b55bf3bac336091cf12e4a0b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "a24e747a-5987-4b3c-af15-9cfb90015bdc", "value": "T13004E045BEA10FDBC05FDD744A6F031B55EC86ED86E2A33A21BCC898B1D921646E7D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "1ac7e634-28bd-4ade-a43d-ceafbca40326", "value": "3072:oDTIzc663gm1A4DnAxGyjmPfsqKzobbNI6tHDgxDBLwCJg+RjD:rzR63rCWAxGy+EcJcx1LtJgwv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771776323, "uuid": "afbb9fe9-8572-4c6e-8eda-1a1b0b7f565b", "value": 180215, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "a2672a90-ff49-4b7d-93b0-16960ef814ce", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b8a0c95-1008-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771776323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "e62f358e-697b-44f2-abcb-abce30fb1ec0", "comment": "Malware payload", "value": "c5cc9df568b2c04ecdfe53712e399a01", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "9d40b2a7-d977-4c7c-8f7e-9247a0eb7d66", "comment": "Malware payload", "value": "091f405ff4e58b727a91c7c46f58549469c9dd1cad0ed02ba87ddbf04f034c03", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "c870bd8b-e062-4519-8f16-81f192ed6be4", "value": "T14ED3F154F080EB73C6E016BDF69D260C734347B8E2DA73498D259E3627E665B4E36E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "b38e0f46-9299-4053-8a4b-69ba7c45213d", "value": "3072:7D0ownSrawTbO3ubsh//NSXcWIuzqs1lGD:7xwSuwHO3uoh/lwYuzqQlGD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771776323, "uuid": "d5cd5485-22c3-4813-aa50-1ba114105d9d", "value": 142073, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "806658dd-1d57-4682-b785-fce1d65342e2", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b8a2be1-1008-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771776323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "1184576a-9a03-423c-8446-09f410cd66d3", "comment": "Malware payload", "value": "61bcee0e368ec72aaae4bbfdad540f9f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "390a6a3e-9285-4ca7-ade4-f8b4e1cee3fc", "comment": "Malware payload", "value": "ed431fc3720a0b62c3a777ac0b2bb7eabfbdb0d1455fd59d0979973adb0f430a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "fc2998b6-74cb-44d4-a866-40493dad7790", "value": "T1EBC3F141F782D2B5E1838A32908AA7DF1731DF17000DCA4BF3487E346DAA295A51FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "91047db6-1e84-4432-b251-efc8ef3f4f61", "value": "3072:qa3z5a9yc6D6ZRQIFT3p2z6YPTbuGM49FAfEObk7qMbtVUB/mcPa44j0AWd:qqm10aRQIHmTPfxM4MfS7q6cot4456", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771776323, "uuid": "12b4eb7a-da32-458f-867a-a6aecd0a90a8", "value": 127081, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "53cc9d03-2710-4970-b070-72d607cf1625", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b8c0d14-1008-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771776323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "f4c5b271-b3b5-4681-9489-ef866ed0baba", "comment": "Malware payload", "value": "841345f8b73d98a38927eeece6c167e2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "4ffb64c7-513f-4eb9-b361-5ba253f9eff2", "comment": "Malware payload", "value": "3c968183d34d54807205b993be616453785c53ffb1dfe5aba1fba8a107c4f466", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "daaddb8c-6f37-46ee-8c64-a23de7fc89ee", "value": "T153D3F195F4A15A32CAE5227EF65E560DB3434778D3E97302DC148F1137AB9AB0F3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "eb324064-d5b1-4255-bd8b-2e8fd44b846d", "value": "3072:foTTImvmBwkHiJBpV6WiMtWqaWYYt5ZmJ9yy6EIZKO+W7vDHJL:fgIwWwGiJBpOOHYmjmJroZB5DDpL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771776323, "uuid": "d31cff92-01ba-4508-a30f-46510044feb1", "value": 142190, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776323, "uuid": "b2614087-f503-4315-844d-a7b6ea8af5fc", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c0074e6-1008-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771776378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776378, "uuid": "6c0c7b70-a19a-41a5-82f1-a16434bb2d12", "comment": "Malware payload", "value": "92c181c581bfb971b79177ffabc1faa8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776378, "uuid": "36aceaac-67e4-4ecf-8bb6-9faa6f42e0bd", "comment": "Malware payload", "value": "0fd9976f9e007f88d15391ea777df3f42f0f68f2a928c387685fc1ddcaf111da", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776378, "uuid": "6fd9c3c9-4f94-4cb6-a7c0-7232a5683c65", "value": "T1A404F151FF0D0463DA526FF56E7B0B62D72D4CB224ABD124240A7AA61BB377B82077", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776378, "uuid": "cecf1e3c-0023-4d86-86c7-07beacc35c9a", "value": "3072:ozdurayQy5HEcMf3odZIDJE3aSpCGkXP/wxqBMUzfC/e7532ZklMTQzL290:ozdurafekcMwd6DJqHpCZjMEC/C5mZOZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771776378, "uuid": "b7c35791-2e90-4555-b27d-5b7c5cd38640", "value": 186172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776378, "uuid": "c75cbac5-7dcb-4d21-ba26-74491d32c6aa", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93634583-1008-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771776444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776444, "uuid": "cbe28582-6576-41d5-b1bc-29d55e5e2f9a", "comment": "Malware payload", "value": "aa555de8a2160b51a099653e8299178e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776444, "uuid": "3c0205ac-5067-41b6-8a71-04a5d60ebfbf", "comment": "Malware payload", "value": "e1e780b435b4e12571e2e5510ebc705549b6058fd0c6899ce0341031b3b01f82", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776444, "uuid": "5d477527-e4e1-4b67-b486-20b723b8f417", "value": "T12604F18777015F61C22A853219FFC691AFFA26D71AC29946B32CDD10AF4174CA82FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776444, "uuid": "a6f15e96-c12c-4155-af27-dfb36c1afe25", "value": "3072:kgfKVeEOH4lcgjDxMT58MeGN04+T2fPL79o1yCW+owCKoOlkeYkmhaQlcV3dNPxl:kbNR1weGN04BPtDC5owCl7eYh0CcV3n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771776444, "uuid": "4f1ed1d4-7268-4c93-ad40-d2cfe864d6a4", "value": 180671, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776444, "uuid": "15ffa510-39de-4dce-a35a-830f5f223261", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a19b866b-1008-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771776468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776468, "uuid": "f2372a39-0e6e-4979-bab9-6bac349c0a94", "comment": "Malware payload (Mirai)", "value": "0458caf8fe409ea87a80ad63900f0132", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776468, "uuid": "6f8713c7-2094-4569-a657-1bb9490908e7", "comment": "Malware payload (Mirai)", "value": "d3f62856c616aba8e182df8c6e19a35ca1a001d24c5dffc431433a6eb5e0c6c9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776468, "uuid": "f3a8721a-03ca-478c-8d06-df6c019cf450", "value": "T1A4E34A02B30C0A47D2632EF03A3F2BD1D3EF959221E4F681756F9A8992B1D361585E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776468, "uuid": "7edf532a-f2db-4784-b28c-745811dd5619", "value": "3072:e6k6mOxEco4YcIoW1Yiok1GaVK6N6hh1TTqS:e6kTOxEcscIoW1YVsGQkqS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771776468, "uuid": "fed584f1-879b-482c-8353-661709d87680", "value": 153884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776468, "uuid": "0334688b-f506-4b3a-92d9-49b1add10b2a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59b4b8cb-1009-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771776777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776777, "uuid": "82d1f0a2-6095-485b-b01a-638a44fe9a55", "comment": "Malware payload (Mirai)", "value": "0ed981cf99b94650110635c9198f54cc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776777, "uuid": "ea4d5e2d-e4e1-4386-b78a-bf1cb76deb69", "comment": "Malware payload (Mirai)", "value": "9f9506f604eda3b3875196fac23bb2f89ed1850b1c425d3c75411103e1d8a6a1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776777, "uuid": "cca8c270-4301-491d-a570-e6a4954ad350", "value": "T12F243A46EA408F13C0D727BAF69F4245332397A4D3E77306A924ABB43F8779E4E265", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776777, "uuid": "8f8543d3-636a-4036-8b2a-587a8d7b1b82", "value": "6144:ZTK8jctNpI/FbavOA3zHJT14j2lggI3theM/R9m12JLGhQH:hKN4/FbavOA3zHN+i/ShX/fm1sLGhQH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771776777, "uuid": "71aa5b59-141d-4918-a4dc-93b98c4c2350", "value": 219690, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776777, "uuid": "a6cb473f-4c8c-46af-8932-3f6e4370b00c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4fe487f5-100c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771778049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778049, "uuid": "03344b3a-a1f3-423a-a0ac-c3edfd5c9173", "comment": "Malware payload", "value": "0fb905a7239f07d59efbc36521859732", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778049, "uuid": "219a51e5-a5b8-4361-ab70-e3113aafd152", "comment": "Malware payload", "value": "b58d1caf222e764bf6b752b713774e5f56804657993c66193096163b1fa066f2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778049, "uuid": "50794107-c0ba-426b-a8f3-cf7279c10c92", "value": "T15541387450F21C732A586580B2732B96BFB3DE5346A322DC39DE1F795F86B03619B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778049, "uuid": "cbf95801-ff57-4275-808a-461182046b7e", "value": "48:chRu9RHnB6gF/iPdFHPwWYclwnmZhlwn8/bUyNl/F:cLubB6wioVBqQyzF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778049, "uuid": "0dcc54a3-732c-4893-9d3f-d94355477fe3", "value": 2365, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778049, "uuid": "dad7f8ea-ba27-4f38-a43e-7dccbde39533", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6db766ea-100c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771778099, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778099, "uuid": "6d9023a4-c574-4575-8aa5-a06e7a50ee60", "comment": "Malware payload", "value": "7a54d2ac0996e420be706667bb61507d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778099, "uuid": "c418019a-02f7-4004-91cc-9251e4a16a81", "comment": "Malware payload", "value": "a03e022e231731959c9e37b09927232817223d8b815bd6457bc81edebfc04519", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778099, "uuid": "41e63fa2-335c-4d15-af47-0be85e0e07f2", "value": "T150412C7421F20C332A212684B3371B657F76DC474993618C39EE2D29BF97F16A5AB0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778099, "uuid": "6206367d-7f58-47d8-8202-aec337d67e91", "value": "24:chnRUR8fARW5wgH9HHIuCzCRpYdZetuX56KLUlDHr4+YWIyK9lc9HHESkZWglDHF:chRu9RLQnB6gtuXqlrvwx9lwn8ZLlrF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778099, "uuid": "99a2c8ed-53cd-457b-a2d6-b889d4f5d72a", "value": 1922, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778099, "uuid": "2ec9101c-1ae6-4ad5-98b5-69c6c27ba1ad", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "796be643-100c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771778118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778118, "uuid": "c1314ae6-dd2a-4acb-bbe8-b686b1cfdd3c", "comment": "Malware payload", "value": "d9aabfd9df5e9013f3ef22c57ce56069", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778118, "uuid": "54716d1a-e4f4-4a55-8f3f-b4907498436a", "comment": "Malware payload", "value": "faca3d0ea788c16d4fef5a906229fc9a1a9f529e1c119b7e25469ea2b4046f4f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778118, "uuid": "9d1609bc-bacd-4f4c-b689-11cce60e8838", "value": "T1B512353B21F08732D3C450DA52A61A654E72A70B452614B5F4FEA336AF2C90731E7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778118, "uuid": "f1637ed3-1579-4a56-ada6-15ec65177ce8", "value": "96:cCuosht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waYvj2Cptps:cCul4hvZ5m5FG4j4HKNpiva", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778118, "uuid": "9b0ae249-e816-4607-92d9-7a48e5cf44fc", "value": 9736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778118, "uuid": "c20d9491-19b0-487e-9422-7b18c956500c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7b5e88c-100c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771778330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778330, "uuid": "83c6bbeb-80eb-4c54-99f9-34ed83994ea8", "comment": "Malware payload", "value": "dbe8de91651bd6157035db0167e01c39", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778330, "uuid": "a76fa565-8722-4374-b0d4-d7c0b56bf6cf", "comment": "Malware payload", "value": "9bc32c3d9f0108740ece3cf74b9e81eb0ec43c6740a50e50cc742b9f32345a37", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778330, "uuid": "1b0db7e7-adfa-411e-88cf-67760e5cf28a", "value": "T1B921997421F148731E545980F2372BAAAB73D85755D3624C38DE2F39AFA7B03A5BE0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778330, "uuid": "d014463a-94f3-4b19-9c13-2ab4c9b93f3b", "value": "24:cnnRUR8fARVNvoslc9HHYbxtNuPl/Ha+VsUy/Yul/HVeN:cnRu9RVJoslwnYbxaPl/BWUQl/s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778330, "uuid": "deb94f81-447a-471c-8c25-03699c24f14f", "value": 1430, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778330, "uuid": "25bc841a-9ca2-4e76-aeca-b6e32b5e45ce", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f12753b-100d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771778423, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778423, "uuid": "1621878c-f58f-4bf1-ada5-b4bca60f8030", "comment": "Malware payload (Mirai)", "value": "00b7692ab17766379a188d17f33ad436", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778423, "uuid": "33d336d6-b2ec-4173-a0ee-d746fe0c5856", "comment": "Malware payload (Mirai)", "value": "51f175a2ed965117263fe20f538addaaeb7e24e396619f92c1a21fe6c7c9273c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778423, "uuid": "b85d3c7f-4ee6-4dca-b8d8-d08bb3ce7007", "value": "T11FE2E194E3820FAAFFFB8D66AC97E1D937F80E8B6191D75271448700B8E54A2BD456", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778423, "uuid": "b04cb1ef-1cd7-4ee8-a985-59e233b411a5", "value": "768:GFpDiy7K0L5CCnrncTwzEf2EpPKXL2C/BU2KQ4034uVcqgw09Lc:G/BDLcCnzXM/pPKXL2CpBKm34u+qgw0q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778423, "uuid": "ae3bce6e-7d00-45fb-ac00-01e5af6267ca", "value": 33200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778423, "uuid": "d032c77f-4f1e-405d-88e5-be39efc16574", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f320057-100d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771778423, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778423, "uuid": "94f13164-13b4-4e90-943c-cbc0033cd6d2", "comment": "Malware payload (Mirai)", "value": "c35d879ec1f2698110df2c1625ed111a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778423, "uuid": "cf204422-4d4e-4b2d-97ba-403310f0371e", "comment": "Malware payload (Mirai)", "value": "101dac9544a8b1a7bec88d7a269a233fc8771e3c5b1839556c29d44a4e38f3b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778423, "uuid": "75a07c89-3a8f-415e-9ee1-a76fc90c4dca", "value": "T1E0C2E1A260F9CE03C4F343775D3C15A661606435A35DED1E37699BC937460E4663AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778423, "uuid": "6ace8b75-371c-4760-8764-82c8fd86881a", "value": "768:+5+Kcrb9VDJee2KTgdTHOBcK5ZCAySlKK:xlrb9veKTg9QB5V5r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778423, "uuid": "86f9a8d0-cd85-437a-9a03-2a0ba6922944", "value": 27704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778423, "uuid": "856e3361-f759-4c51-b48e-18bb794c5553", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f40efb0-100d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771778423, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778423, "uuid": "d3888435-99df-4057-b802-24e43692d755", "comment": "Malware payload", "value": "3414f8a7f3468845241bce5250883b16", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778423, "uuid": "20c88956-ea89-4679-bde0-467cf3fe75ed", "comment": "Malware payload", "value": "42c305a25b61d95365a8e28f42aff6512fb12158d46310a92d8c846df164dacb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778423, "uuid": "e62a168e-9a1b-49df-891f-b6d0a65f8448", "value": "T105666BC9BC1D6462D5CAB7752F2312D93639BC088F42C7232614BF7DAAB23598F136", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778423, "uuid": "61f598b2-706a-4f70-8104-e529e257a40a", "value": "98304:JiXm443RvrhmHtGpZpPf+DH66S3TUUSrpBztEV:Jkm443RvrhwK1QBrpZ+V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778423, "uuid": "7c19b09d-3823-4822-b36d-7af3520becfb", "value": 6815892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778423, "uuid": "dad4304b-d3c0-4f92-b470-1c4197267532", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f487d24-100d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771778423, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778423, "uuid": "bf78bd3c-5059-461e-a82d-705dc98fde20", "comment": "Malware payload", "value": "95f4edb59fe22020933b886f2659e405", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778423, "uuid": "6f1eefb9-114f-48b4-b46a-47fa209e08ac", "comment": "Malware payload", "value": "5f2cd96db21c26f0717c311abca95f757fcb7c6fe4738e837cc4ab4a6039f0f5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778423, "uuid": "f2119b0d-365d-43aa-8810-1675ea0e240c", "value": "T12982436B93D0CD3ECCF86236499B4A3462B3D074EB72532B6A5061B21D837881F7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778423, "uuid": "b926965e-d6db-4f5f-9f3f-0e6791fe124e", "value": "384:+RVcAn0Xvn/3PHfXvn/3PHfayqC6Vu3D2P8tSfm:eN0Xvn/3PHfXvn/3PHfayqC6VotSfm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778423, "uuid": "36169116-cf0f-4534-a524-8c02123bc667", "value": 17688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778423, "uuid": "486b64cd-08c2-4823-a7d3-230c6b5ac6b2", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f892bf6-100d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771778424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778424, "uuid": "b640f61a-a211-4cf8-b360-a1fb19f81953", "comment": "Malware payload (Mirai)", "value": "ec17b9fbb1911e9d2e095f69da6d7c33", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778424, "uuid": "76aa2f88-b5f3-4000-931f-f35c218793ce", "comment": "Malware payload (Mirai)", "value": "273fa53f3311a6efa02d584d7ce920d4cfffd848dafb075e2df3157ea1d04287", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778424, "uuid": "b08c05e3-fdff-43c2-8125-269f3a15bfd6", "value": "T1AB5423FE1C6207EBC7689FF3B52A7254A28013C7018D458E5B6AD9B0F547326C854F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778424, "uuid": "c0b15d28-5142-403a-81cb-223bc073fc4c", "value": "6144:7j7xkeCaXWJ4tgClKnHtFFLyntGRabhy05+3LNE4G9BM78jBjoe4:7HBXWJ6bYtFFmntGRabw3RMy6jq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778424, "uuid": "3f402238-1a34-4ae1-b7cb-6027651dd3dd", "value": 299932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778424, "uuid": "3b270f91-8295-4ecf-86bb-36c4f9af64e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efc36382-0334-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1771778424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778424, "uuid": "bd686d8f-95a7-46c2-a531-63e5e6f9c69e", "comment": "Malware payload", "value": "a873a9e36eb67dc394595fc34db9e30e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778424, "uuid": "12cdedc4-9495-4724-839c-eaf3fb6b900d", "comment": "Malware payload", "value": "ad9abbacc85360db2fce1f25a6978e02848a9b6588e30438a089ad8620a3e118", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778424, "uuid": "127cda7d-f9a8-4baf-9e23-fd94457e5f0e", "value": "T169765AC7FCA404A9C0AEE33589629163BA717C485F2123D72B50FF682F36BD06A757", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778424, "uuid": "14e8cb44-887c-4719-93e1-83d82db9f8fd", "value": "49152:+gZDlTVfPP05lX3X9RQWCCRxvWH3amzYmL3wWIo3baPAHlUoxwZPPZRitGi+fGDt:+wzHbAR6YmjRiPAFyF1VcBqEf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778424, "uuid": "bc5786d8-c91b-44f9-a2ca-71a678810677", "value": 7164052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778424, "uuid": "255a88f8-3686-464d-8cac-4527d88ca66a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fa0e987-100d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771778424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778424, "uuid": "a41d2e55-564e-4ddc-8bbd-c57470bf3897", "comment": "Malware payload", "value": "9ec49c4e3763b489d1a12e811636af9e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778424, "uuid": "7695ad0c-9fd6-45d3-a731-24621de32062", "comment": "Malware payload", "value": "69ba94b3ae8e39ca9b791fa9db219b188852cf38de0d8b436d5c441ae22429af", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778424, "uuid": "423cdc47-338f-4a08-ac68-fd49c1d4b1e2", "value": "T17B765AC7FC9405A9C0AEE33189629263BA717C485F2123D72B50FF682F36BD06AB57", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778424, "uuid": "2fc2e594-f88d-42d7-9ac6-2259e4c1411c", "value": "49152:eUhoYQqQpXkclXsqVDEeNPmQlAxsRd+mL8qF7FnQM/OrUoxwZP3ZRwtGi+fGDpTi:ef0C8IN+moA1/axF1VcBfEu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778424, "uuid": "e1b04014-9a63-4106-92ad-67df56ab349b", "value": 7164052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778424, "uuid": "a68b0e39-7ad7-45f7-ba99-f640d1803db3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "334e96d3-100d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771778430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778430, "uuid": "e8948d25-5c37-416d-80ba-1ec4487480cf", "comment": "Malware payload (Mirai)", "value": "4a6930dd6c6d9d571a6abae77cf30612", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778430, "uuid": "eb85bc06-ac81-4255-9d3b-f8e8736dd57a", "comment": "Malware payload (Mirai)", "value": "255540511d60f705c9130859e02853e3a4b444fe1f7b41b6fd2dd1baf39e77ad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778430, "uuid": "e17704a6-1f51-434d-8455-817ca4e69fa3", "value": "T1F1330113B719FDA2DE751D79B2F98C8E3148426ED0EC682239C8696163C2157FBD48", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778430, "uuid": "5447504c-102b-4235-ba60-b2b5f6e39f6b", "value": "768:SfZYvZxNZ/SPjiUv0w0zyIvfgJy2LHRfbZlQ749q3UEL2qEK5J6OAsNTGjf2tl8c:dPtQjiZVcykHRDZUL15J6RN2tAM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778430, "uuid": "bc724bf6-3192-4f8c-bf5e-caa721c3e6bb", "value": 51432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778430, "uuid": "4912d63b-ec99-42ce-83a6-3b415ea6a211", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34c60d74-100d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771778433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778433, "uuid": "d2e0609e-4d5f-4d31-ab90-beee3171e963", "comment": "Malware payload (Mirai)", "value": "a492dc8a9268127be738b885f526d47a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778433, "uuid": "aead145f-193c-4c94-9824-92c9b61f45f1", "comment": "Malware payload (Mirai)", "value": "3f708d6260c0cc692ec2fb9a1c646dd268cf252f43d84db872d4b3d723f4ffc7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778433, "uuid": "d137b7ca-f2f0-4d34-87df-9b56a6c35791", "value": "T1F944120896EEBA4B6D83B27D5CFB4115159205E2CAEF3D15DD2EE102D1E23280B45D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778433, "uuid": "406185da-0b76-468e-8ca0-cbd74069d79d", "value": "6144:wbqUfq0dY5isQZOgq/loOszQ5jL5eJVE+9Bg0HKhOA/9YLF:wbviH5isTg2BhL5evbA/9e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778433, "uuid": "faa9c208-1112-48fe-afe2-f3cd838d08ce", "value": 266704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778433, "uuid": "b80b292d-dbcd-48a0-ac4e-393010c65728", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34c6f1fb-100d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771778433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778433, "uuid": "8d59e762-819b-4902-a4b4-7bef99f5858d", "comment": "Malware payload (Mirai)", "value": "ce3c4b5da5802efb970deda6a7b4f86f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778433, "uuid": "1444379f-3e2d-4ab3-91bd-a53925ca5fc0", "comment": "Malware payload (Mirai)", "value": "0c46a5d80d77f82b32299d00973094fb5c48ac4f2c408ca452c9837b1e01fed6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778433, "uuid": "292f1f1f-b7a1-4d97-a67f-8f20171454f5", "value": "T1E47423F4F5D60CE7E14B08B4C60A1E379F8E1A7E448C1A097ADDC4EBED391AD18951", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778433, "uuid": "401e0d96-6caa-4d00-90f3-ced983beba67", "value": "6144:wPrNuNXglH1+qQ1K3mipl8fLSFplOIV+UusPSoJWllvn5CoAciWYk9NsN:m0qEK3mipmj0pl/PnJE5CoAcqN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778433, "uuid": "a134de3d-6492-46f5-a7df-b7d186020e0c", "value": 349324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778433, "uuid": "bdbdb730-2f06-4b68-a396-ee0caef0e771", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34cc9345-100d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771778433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778433, "uuid": "6ce36521-d14c-4caf-9246-c5cb4fb79e12", "comment": "Malware payload", "value": "d06658fcf82330d11b077e15b6db26fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778433, "uuid": "3143e525-e806-4f88-a2fe-de16636330f7", "comment": "Malware payload", "value": "316df36ec18564ca9ce4d71a3829f6f2299df57d5438f345dfccfb037e65a69f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778433, "uuid": "48094010-88fb-49f5-af92-b67ab3f0b09b", "value": "T1C2462851FECB54F6EA031A3111BBA26F63315D058F24EBD7EA407F2AF97B69108321", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778433, "uuid": "9c8c4d38-1f63-4963-b457-3a295b7d432a", "value": "49152:eI8f7VkSr+GrS13GTP28DDMPBpRb/gMw9S7ztpVSbFoX5cTG5E8:5k7x+G213SP7Ktboa8W/E8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778433, "uuid": "b7bf6588-7d68-46f2-990c-aaaf8ab6c840", "value": 5705912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778433, "uuid": "4243f803-c1a6-48d7-95e9-ffc68a645da0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34da0f87-100d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771778433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778433, "uuid": "6ae1896c-1cee-40a9-acc8-e768b0c03564", "comment": "Malware payload", "value": "7f90e2e9aa6eea34a8fde56c039bde78", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778433, "uuid": "bbea9314-3142-4eeb-97ff-51a42afa6282", "comment": "Malware payload", "value": "2c9f02d0471e80c86359a8515afc6a1a9f3d634cec98461e5583864b3d68a760", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778433, "uuid": "bdde656b-5650-40bf-aeca-31f5d8ae7255", "value": "T1D86627136A68EB0FC21832345CB1CAA467691C8542DB9917B395F31DE9F20EC9D6EC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778433, "uuid": "a9246dff-aa0c-42ac-85df-c70671322341", "value": "49152:JOawbsmSZcQzGaij1hZvuXknNpRTlC7/E9FBnj4oQBwOEItQwEt+W7f8+HHEt5Ey:ynyyNQS7wMpnEjEy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778433, "uuid": "1e3c7885-ab62-4903-8567-9d228b526ceb", "value": 6553815, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778433, "uuid": "600a8c13-25e9-469a-8578-7e37681ff2b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f03375d3-0334-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1771778433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778433, "uuid": "6c0d9d41-17c9-4295-bc74-4ce1e303e0c9", "comment": "Malware payload (Gafgyt)", "value": "5e1f1bb71c779e1b74649666de4d414c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778433, "uuid": "bbc1aad3-3014-4077-9173-7b845e7cec2e", "comment": "Malware payload (Gafgyt)", "value": "0f070694f5431d94b73d3b31e7738f198c43bc01ec62404f2b22134dd28aa34e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778433, "uuid": "a24069bb-d971-4a6e-8938-cf126b512d50", "value": "T1786629D7B9924942C4E43B77A8BE81C432621EBA9F8612176D05FE3C3EBE1D90E357", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778433, "uuid": "280dc3ff-443c-4c3a-8c51-cb247b60fdf0", "value": "49152:X8aNzsObKFB5N/TvNRLSX0PNW5mwXnR13E5/ii5ohpoH7o5Z5EW:X8FF5N/pReXZi5rH7wEW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778433, "uuid": "fab5ae9a-24c5-4a40-b621-434b111136dc", "value": 7078036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778433, "uuid": "c540fc9f-1065-4911-b2ff-db246d119366", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34e1e786-100d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771778433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778433, "uuid": "4d550bb2-c6d5-4e8a-9d43-15bfec1ad4c3", "comment": "Malware payload", "value": "c123fe3823803ae55b6f5d1eb4e70c86", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778433, "uuid": "086d6249-e307-4e87-8add-e3f6dd169d23", "comment": "Malware payload", "value": "c865bf8e60d1774a4d5637d035651bb4b589e958235b12dd60a317b9f3c3d750", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778433, "uuid": "f07f5cb7-bc74-42a5-8cd3-3a9b2f88fb53", "value": "T1286628D7B8914942C4E83777A8BE80C872631EBA9B9652176D05FE3C3EBE1D90E357", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778433, "uuid": "def88359-f37d-408d-afcc-d1636c70d379", "value": "49152:WCzegw80bzbT72Vb1RLSX0PNW5mwXnR13E5Kii5ohpoMHvtyZ5EGD:WCIvT727ReXCi5rMHvgEK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778433, "uuid": "e195ccc9-735c-43b0-b867-8c08385080a7", "value": 7078036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778433, "uuid": "7f0e2168-8a64-4f9e-b326-afd3f0e24cfd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f182c43-100d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771778450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778450, "uuid": "dd17bd34-65dc-4d07-9d7b-8cd8b5bbf677", "comment": "Malware payload", "value": "6f58091a849a7c467af537ef24e2c513", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778450, "uuid": "3a8cf28d-cb90-4290-98d3-e40c175b941e", "comment": "Malware payload", "value": "675490b983022a13fc39278a99372d8abeecbb3301ac412535327dfc32f2afb0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778450, "uuid": "281b6535-5548-4c8d-9090-225c597b6115", "value": "T11042337B21F08B3297D010C9A2771B614E72960B456624B9F4FE6735AF2DA0371EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778450, "uuid": "0478ab5b-6519-49a6-a2b0-62f0eb027f13", "value": "96:cCuhmB6csht+O+v1fsn+h4+tIiKqCTyOysuKNpUj4waYvjxlPOSEgXYUcFn0m0F:cCuhK6p4hvZ5m5FoKNpivOX6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778450, "uuid": "05063474-151e-423e-8771-ea66bf1288ec", "value": 12547, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778450, "uuid": "3463cbc6-60b0-457a-856e-15afbf9e3bfc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72942ba5-100d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771778536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778536, "uuid": "19583b3a-afea-4630-a1c3-10ac35596072", "comment": "Malware payload", "value": "926fef929129191415637ac174ebe093", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778536, "uuid": "df60dfd9-9c4a-4422-ac02-24de7b42b189", "comment": "Malware payload", "value": "02cd1f9777760d4f9efd5fb77bb356e056c375ab2dc09446db76437243627406", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778536, "uuid": "41544e8d-8ff5-4a84-827b-9fb77e2a0d67", "value": "T12A61E7E5A2381D2A75CA8D48F555D1911CDBBB32BFFA60C0D0C2EDB15EA97082E18F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778536, "uuid": "81957dd8-1fb7-4826-aec2-f77e917f4b3d", "value": "24:1RGXNLwhWUNDwdkHE3/3EDfkHE3/3tGdDQkHE3/3PQDnwkHE3/3qLDFkHE3/34DH:1IvakVklgkekTkgk4kW4kq/kPkIX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778536, "uuid": "c38f4884-5c1d-4907-bce7-9dfc23b33245", "value": 3451, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778536, "uuid": "0d6466a5-262f-41ab-97a4-e6f97f6f05e0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c764365-100d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771778655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778655, "uuid": "a0c85a73-f85a-42f5-a2f0-efde8b260290", "comment": "Malware payload", "value": "eaafdee9ea32dad3ad227980cd937956", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778655, "uuid": "e6acc942-11c4-427d-97b8-78b7da4b4b4f", "comment": "Malware payload", "value": "6c99d25b3f5a1f9148009475ff2c944b562bb06339ec0555c05208cbb5dd2445", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778655, "uuid": "a6a3db2f-a16d-4c1c-aaab-960c8bc343a8", "value": "T197458E56B2F374FDC067C030839BDB626935F46541326E7B61C4DA342EA2EA01B29F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778655, "uuid": "065da927-9bac-4e3a-b717-0d25a61692e8", "value": "12288:RyMaDhKS9GYaUsI4RnO5tkd0+NCaedYKlmyStSosC5kCSgJ/CWh:R5aDhKS9II4RnO56m++dYPTsyLJ/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778655, "uuid": "1786e574-3e45-4c2e-9538-fcd7250936b0", "value": 1177376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778655, "uuid": "146587e9-9851-4cc6-9384-5dfe3048ac7d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "415593d9-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771778883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778883, "uuid": "b87073f2-a624-49db-85eb-b6ec87d560a9", "comment": "Malware payload (Mirai)", "value": "eb27412d41672ed5e9ec417d1278e09f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778883, "uuid": "00a6c195-514a-4c7f-a806-875be08ebb40", "comment": "Malware payload (Mirai)", "value": "5773d99e05b0f349bf329964e9a42fe6c67ec2ea0d190680601aa0fef0d33a8f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778883, "uuid": "e4dfd195-a003-4995-8918-47d5b175357e", "value": "T1A123F963F84286ABC2D012B2B66F9B4D376253FAC2CBB353E91543407B9650F0D63E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778883, "uuid": "cd3f510d-cbe3-4cd1-8f3e-c481f863a05e", "value": "768:x2r1LRGB+pEmcG5kIVIiNTzmuRqZe8oCxags4+b7KG6Soyr2IymQY2AUm6hh1LBS:orjEJG5kIXdauRIvH5shCG6i2IymQY2D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771778883, "uuid": "702faec6-69c1-4864-949a-c905c98477bc", "value": 48048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778883, "uuid": "ca7f505d-3d24-4092-a2b9-84e170928167", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "956e9589-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779024, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779024, "uuid": "b246c7aa-d34b-4b38-851a-aaa721e0f266", "comment": "Malware payload (Mirai)", "value": "dda3ee2955cdd908c6b3e1ee6a352a70", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779024, "uuid": "8a37e37c-6abb-482e-b999-653d33195c30", "comment": "Malware payload (Mirai)", "value": "1ed6989a100ba1e42eb231e0f67aed4e8612b2aa0e60e51647b905e9e2cbff2a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779024, "uuid": "462cee73-38af-4816-bc1e-340c6faadcbc", "value": "T155C2D0B0F8C1BDF2DEFEAD78881185D03BE61E5837D28DDA208CED115212D3796A8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779024, "uuid": "11ba0661-a8c3-4b77-ac21-9192eb04c416", "value": "768:7KnqLiChP7gI5gBZw+LajRJ74uVcqgw09u:7KqL1h4Zwa6374u+qgw09u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779024, "uuid": "eb4e7b9f-bde8-40d2-a056-d5898944aca8", "value": 26224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779024, "uuid": "157b6f77-19d7-4685-88cc-3c4dca020499", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95736bf6-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779024, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779024, "uuid": "94c37b14-f612-4c06-9aed-3e5d33262073", "comment": "Malware payload (Mirai)", "value": "917dc8eff902d3676ba051da23d9af7a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779024, "uuid": "4ffb2376-959f-4a81-9077-f30daee63ac8", "comment": "Malware payload (Mirai)", "value": "b3ddf6a28356bfcc462bdab21d179a84f640cb2c702d9fb0e5ed8512985a5b60", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779024, "uuid": "9386b256-7f7b-446e-a3e2-61814d39dc1a", "value": "T1F8C2C0322EEF39B0C29420B6FCB886D7525F4BB965F16521774056A1DEE100362BA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779024, "uuid": "b881f858-42f3-4a57-9070-ec52bdf1918a", "value": "384:kXNSIfjdxuZ1DUofVOyPqMvt6GqAAdq1K0jzNH7EUz6z6RNo9chHnhymdGUop5h7:AjKX9vt6GqA3Q0jzV7EUyUq9ens3UozF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779024, "uuid": "9547e6bf-ba30-4aa8-b947-193a8fc72f39", "value": 27336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779024, "uuid": "d971bd08-68a9-4d21-8522-dbb578007107", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "957a33d0-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779024, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779024, "uuid": "0ce11224-25e1-45fe-9fa2-83b8bce78719", "comment": "Malware payload (Mirai)", "value": "38044bf4441423325b28f90d72430794", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779024, "uuid": "23130b7b-f23a-492a-89b0-c5099d8a8b3a", "comment": "Malware payload (Mirai)", "value": "f93657815b499740cfddec4fec45bc28d610dd173777655a2a78d537477ec467", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779024, "uuid": "39e2713a-2d84-4508-a035-3386481cbe43", "value": "T1D7B2E070B1E9A1F0CD316034F57E8983ABDA41FD90FD7B21322750F86E5688D2AE85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779024, "uuid": "7e2bd223-48fe-4571-b3dc-66a25cedd11a", "value": "384:osoBE5aNSS75BOI+ypZ5vTlYIwcvsdTf5MF1iAUgefoeDYbZXGcH1ghymdGUop52:ocaNSq5sOHpTqncvsdDePiAUgefoeDes", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779024, "uuid": "0670f2f5-1acf-470a-b0fd-e36491cc1aea", "value": 23736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779024, "uuid": "7d41104e-ac06-4004-995f-bfb9ddccf788", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9582934e-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779024, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779024, "uuid": "0a2a68ab-d8dc-40b1-9b57-204c11673496", "comment": "Malware payload (Mirai)", "value": "ff3a7c3f6d071e852f4ae725e9e3c54a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779024, "uuid": "16444848-76ca-47bd-9a91-aabe74145f0f", "comment": "Malware payload (Mirai)", "value": "5559e4dc9059e7a59ea60a9af6addd794ba141d468219eb2f4c5e8ef700cbeb3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779024, "uuid": "d3c8a694-ac15-45bb-a989-3eb78b529ca5", "value": "T1FF732A26B97A1E26C0D4B57E60FB8B11F6E1278E26B4C50A7D720E5EEF147006502E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779024, "uuid": "3360d1c2-0214-4de9-b8ed-4a32249a2426", "value": "1536:hD/B6f6UD5hAS7mo0DCCAXpSKV6v3G78nN9W/:927jqCt8v3GI/A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779024, "uuid": "16c254c4-6520-4e1b-889e-ce316d150827", "value": 74752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779024, "uuid": "e902a4ab-e77e-4422-9fc0-a544923dabb9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9589f117-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779024, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779024, "uuid": "5bd08f03-3412-4846-b5a2-dbff5fa4f076", "comment": "Malware payload (Mirai)", "value": "f308cd2b8a452c79a3641e35ff885899", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779024, "uuid": "a5828e1b-a160-4a47-bcf0-1d60d31a2e52", "comment": "Malware payload (Mirai)", "value": "4c62e26f9707f5a0657a9dab13c4dc4a6291f23498bcce11a23440294f320665", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779024, "uuid": "51b75594-04a3-473e-a4fc-3868788502e0", "value": "T1DF538D75D11DAEA8C0414AB4A9198E704F13E4C046733EF7EA9587A68443DBCF858F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779024, "uuid": "41014b52-5005-4ef2-90e6-4092b2f31a1d", "value": "1536:ragXV1f1Fl/wtknCPQauiufs3Ii3O/qyD6EZeCc:r57f1b/0QHf+Iey6EZe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779024, "uuid": "20200c35-1f34-44be-8bef-8d622dca4833", "value": 63480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779024, "uuid": "57bc47cb-3991-429c-9e48-61193793b9da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9596902a-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779025, "uuid": "20358e34-4e45-47cb-aaa2-ab109d9dd652", "comment": "Malware payload (Mirai)", "value": "6a4aad4e8e05e3e519d1f88423ce292c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779025, "uuid": "20ff5e80-814f-40ec-8baf-5d8a9372197e", "comment": "Malware payload (Mirai)", "value": "5ef7217759f2b9b2b2ed5368fbd302953ea1693eb4c165443303c8a071c716a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779025, "uuid": "264dd6e3-26d5-4859-947f-c29fc0a05d7f", "value": "T134533B99F4029E3DF88FE9BA84160E05B93023D112931B2767ABFDE37D331659D12E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779025, "uuid": "f3f19fb5-6471-4596-b02e-40037ea920df", "value": "768:me4gpsM204GEkRbjveXd/nQi122EQtBSv3gFHn1eu48B8vB6J7EzNfXQuJpozfym:mo3EkRbDmoiz6IFn1X48B2SEzNfAuJ3m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779025, "uuid": "f6a4b186-4153-4e7d-b710-103f40002005", "value": 65100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779025, "uuid": "d3537a25-6637-4a93-813b-1636b4335a46", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95998976-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779025, "uuid": "46f1268c-9d97-45ef-b940-fd4db2db0f25", "comment": "Malware payload (Mirai)", "value": "0afa727096ad88ca1bd95d125183b2db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779025, "uuid": "39a6125b-8027-452f-94e8-9ae720d594a3", "comment": "Malware payload (Mirai)", "value": "2977d628b784429f0f7337c489ebd20602a2e434320778388db5a0777eb70186", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779025, "uuid": "9b25c5ac-d2c3-4a81-9b6f-9fc99f37cfde", "value": "T172F2E0274626EAF8C539F4731F646A94E665FC152530C3CB85C82BEEED5E6C02E14B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779025, "uuid": "b12d71b7-2449-405f-a96a-361b369fcf46", "value": "768:IyJre0nn8Z456pD0U1bAk3xmFOQFXnaVz7VKyb/PpruBxPh/5G+dj+Lv:IyJpnJSYNXnaLKMuBxPh/B+Lv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779025, "uuid": "a0d8f497-fabf-4c1d-91e7-9b226d738ef5", "value": 37372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779025, "uuid": "9ad8c523-f2f6-4564-91a4-27077bde52a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95a66ccc-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779025, "uuid": "18a9ea6f-0bde-4005-a899-a1ff4a32872d", "comment": "Malware payload (Mirai)", "value": "47d5a3f6f6a4de6e2fa3b0d1be04f1e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779025, "uuid": "089c6709-0897-4fde-967d-667bb815e57a", "comment": "Malware payload (Mirai)", "value": "ba09408dc4f226c27c16a83674f6dc15c0c70f251058c3b90eea87a43be3db27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779025, "uuid": "34e6e694-bd3d-4458-94c0-725d5be32acc", "value": "T107D2E1BC7B0149DBC66EA1B44EE10B262D708F72F0026C076595EAD7BB0989C3CA6D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779025, "uuid": "863fa6ec-5f11-45c1-9dcd-182bfe61d5e1", "value": "768:H4ylAtv6pqLJM0RXaxGyUbXtheU/S3DTLJgGlzDpbuR1JX:YMBqTRXa+Zhr/EDTBVJuh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779025, "uuid": "5d631dfd-bca5-40e5-bcf1-31f1013550ab", "value": 28900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779025, "uuid": "1e3853ae-efe2-4906-aedf-d7a5bf99d4a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95a7cfcd-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779025, "uuid": "a121a224-ef58-4cc3-a0ad-0e943387d6e5", "comment": "Malware payload (Mirai)", "value": "53fd632df96bff863eabfe4363830105", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779025, "uuid": "6a5abe6a-bf51-4f42-982c-2d91c1154a50", "comment": "Malware payload (Mirai)", "value": "ba354eb064fa60160b53d9d2f1efe83255b0dbba4d1420b821815f845c93fd45", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779025, "uuid": "63aa8a46-6dc0-47e3-8c2f-ac40be270235", "value": "T10FE2E1D555B7A479CEB10D7AFC734B4E252EC5FC85FB1022ABF8372427B09A64AB04", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779025, "uuid": "75fdd046-9b98-4423-bd40-614fab02b414", "value": "768:n8Lm6COq1fewdHy62pud4yNOYSOyB8LrtHlLH9q3UELdS:8LJCmjpkcMKUBFLWLY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779025, "uuid": "c800c45d-eaf0-49c9-8b66-59118ed6a057", "value": 31872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779025, "uuid": "646a843d-8fa2-4528-80d3-8dcdd53d7529", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95a8bf62-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779025, "uuid": "8004439a-0301-48ce-a3e2-223715b9571f", "comment": "Malware payload (Mirai)", "value": "36a9462d04088f40c82c11a499fcc2ae", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779025, "uuid": "8a225c86-db21-4c85-966e-94928379f929", "comment": "Malware payload (Mirai)", "value": "861b25202beca720f779cb959f4372c9499a18ddf3177918b3fb9bc57b5e1d95", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779025, "uuid": "09f1ee77-5447-4aca-b463-2a9abe5a45cd", "value": "T14CD2D0BEE4B441C6ED4E1C3E80CC3BA10E56E581631BDB9577218C895B32C5AF16A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779025, "uuid": "ad12dfb9-810d-4dad-bf82-ae5af4cd27d9", "value": "384:e8pVWtmRsLYEpB6V8S628FuRUuNJG9whQ3Cfbo6w+K95orjaIrjRWGVCz0NvP:jMYHb62x4ahQ3CfdwLjWtWa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779025, "uuid": "885b1ac1-be9c-402a-8c27-05a199601887", "value": 29944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779025, "uuid": "23883c0d-3c28-4f53-a232-12c727629b67", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b455215e-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779076, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779076, "uuid": "c8839aa2-0a6e-4449-a44e-c75125f3cdd7", "comment": "Malware payload (Mirai)", "value": "40e839cca2eeef69845718b11137420b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779076, "uuid": "e8f95c90-3394-4c64-adcf-0c72e08cc1e3", "comment": "Malware payload (Mirai)", "value": "94fa1fce8214ff38b5f3f9eab4c7a7af131b074501356179afc578c248b01ba6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779076, "uuid": "e80c2729-e284-44a1-b1cd-c5e7a8d970ff", "value": "T1FD14965E6E228F7EF668C73147B74E249B5923D627E1D680E2ACC1105E6034E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779076, "uuid": "0a35a026-9ea2-4282-9b70-33f038468338", "value": "3072:jUrEuoT9v6IQXgRVCefC6AbAP6rckC9ytr/6hh1a8mHD:jUrE1T7qmnHA9r+9yh38mj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779076, "uuid": "3c91ac74-65a2-459d-a6e4-d94e5086f0ca", "value": 199168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779076, "uuid": "87c53579-8e36-4942-b6c5-1b947377127e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b50fb573-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779077, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779077, "uuid": "99cc5d8c-a39f-4236-b1f4-cdfaa8d5a402", "comment": "Malware payload (Mirai)", "value": "09b11cc0155bf28937e4fc591c3b9e67", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779077, "uuid": "a843690c-913d-4b7b-9032-27844e304bb3", "comment": "Malware payload (Mirai)", "value": "e07711d44c3106393a82af3b978f54af56a225fb705afa31b675f82b789a9628", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779077, "uuid": "d663770e-4a70-4931-8e63-61c1da757149", "value": "T12DA2D0366944DA26C1F0083ABCFEC1DBA2D146B8E277725B271097F0AD8250FB1A55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779077, "uuid": "fb343258-7003-49b7-8f72-376ba3e97c48", "value": "384:c0CLEvw8wFSVcdHwdc9qXtbymSOBB1U0dlDOrgr9njV4wVfoUqEo5hymdGUop5hU:c0SMw8w9H2c9qP1rFRxoUqns3UozY1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779077, "uuid": "c1549d17-d8bd-4cf4-a759-724144b81710", "value": 22724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779077, "uuid": "c01688e3-0a7e-4206-b3cf-d0cbc25bf829", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b51c24ae-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779077, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779077, "uuid": "b5caf0c0-4af5-41b7-b5ff-ab0c17a7ff46", "comment": "Malware payload (Mirai)", "value": "0aa79c01b244eee895e2db6d0cfd1538", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779077, "uuid": "618aae7c-517d-4a4c-a33b-b26ce1ca7549", "comment": "Malware payload (Mirai)", "value": "eef884224d560ae35f9c5bb8a2bcc7d443164ddb9be1c217a7d7cdeceb26a858", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779077, "uuid": "a3f034ae-299e-46d4-bca2-778390637c4e", "value": "T16B23F1BB9E6278B3DA204437C9500E8950471E30D1E975560234A77C6FCB682F6F6E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779077, "uuid": "5e0eb940-e11f-4b61-83b2-d6c136f74728", "value": "768:dnvTKML5+b1+IXQAu2hWFKBYdI7zr/fH9T9q3UEL5SSXH3KLDhRZXX:dXLLqQN1IWaz/IL59H3qhRF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779077, "uuid": "f53f395b-216a-4bf4-8219-b7120afa7b12", "value": 49896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779077, "uuid": "a8f1bd5c-4518-49ab-9074-23ea02b7e01c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b74debdb-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "f1cb39ae-27d4-4aa0-b135-80e92173fc8a", "comment": "Malware payload (Mirai)", "value": "c7443a80ea34ff0a14389e9ad63f5d90", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "a4a131f8-4879-4404-8657-69aa0c42d38d", "comment": "Malware payload (Mirai)", "value": "758847548b1ee124ddf21c2bc26e2307c19199e6844e29bb465f2c80ca05451f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "2d492a14-7fe8-4e1d-ad74-691ef36c5e96", "value": "T12CB2C030EB457A86C7FBAEB549A95EC97BF00F0D8B139BC03185AB10160B67A754D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "5208df9c-df1d-478a-9781-92c2c8164441", "value": "768:iMcwnuluctEkm5x+KVWo102rdhCs6cA7wua4uVcqgw09t:GFuccTndi+Z6cAkua4u+qgw09t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779081, "uuid": "007e69b2-b207-4fbe-ad91-1b27219c187b", "value": 25144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "bb3126f4-e922-4879-9a40-1f1d731238fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b74e54a9-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "6b25514a-dcca-4705-b133-19de3a29f516", "comment": "Malware payload (Mirai)", "value": "67efd66a08b7997d69e22991ccefdab5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "da82778f-7a0e-48d3-b357-cf072870bb28", "comment": "Malware payload (Mirai)", "value": "1a45238b5098bda177b61d7aeaa92c2eac5af331e218abba837599aac5b26d3e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "6a175860-5ed1-4b7f-a15b-a90c4fc358dc", "value": "T1C5C2E16E45952C10C0F05CF2EA78C3467ADDA7A9C3F0367315C617E82A872A76271F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "0e3dbe6d-4574-4d33-934f-dedd1575c9eb", "value": "768:7ie78GZSdAyRmJZjMEHW12h9pbJGs3Uozc:7idGZ3M+97zc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779081, "uuid": "551eae34-fb8a-4e19-ba2a-e29af66eb003", "value": 25724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "e78b0e76-6408-462f-a671-0fd2d694c21e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b74ffe0d-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "a79ee709-85fc-4421-98ac-e9677c3dad31", "comment": "Malware payload (Mirai)", "value": "767ed7e4bf19f42b491e187631bc5442", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "694bf466-d80a-499a-9877-f7c466559987", "comment": "Malware payload (Mirai)", "value": "8dba9661effdd6776c5695658f0ceb62d9cd9bab88133491907e917fb62d66e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "a2bfa952-f591-4bb5-a0a0-9e2386495cf8", "value": "T13DC2E1DEDA74655AC61D2A77409E0BFA5CD4E29CA36C8F4C93318D8823389C7F59D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "30e3a95b-b9fc-43d8-a6cb-6dce0c60b281", "value": "384:+en7SsM5uAR7Siq23JJYi47uMKZ5KVWL3LjNd+7dsxn5bZHc+3kC8OVpc7mnWihx:V7DAN/qUF4KNr9IJmViL7m/QWF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779081, "uuid": "f4cd4104-4394-4e34-9e6f-2fb55d658722", "value": 27688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "614abf67-42aa-4c1c-bb78-c88a7b66d85a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b750fac0-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "10a38360-245b-4654-9989-cb50869dec61", "comment": "Malware payload (Mirai)", "value": "3ffedb7754d29a2dfadf533189f206f4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "5912922a-5627-4c8c-9aca-b36374db42e5", "comment": "Malware payload (Mirai)", "value": "e3f03f49ae30ee155f92f96980319576e19cce0d853befbef88d3a60ec01835b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "0e357ab5-1c59-41f4-b4c6-d903508625fe", "value": "T189132A9E64512D6DDAD36CFB42634F0EA970122094D6432BB3B7EE873933264FE199", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "c2ad7ae7-b3b2-447a-b2d0-fb0e18d2a820", "value": "768:wuGjnCVRsumIeKWSaeekVNcdW9/h/kZT70+H25+f1prdwa4t0eHlw:wuCC7shIeKWLlcOT70CWg1pix9w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779081, "uuid": "847dc88c-d9d3-417b-849d-2755b98d301b", "value": 43576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "e331288a-c868-4242-9f95-91dc9f01aa89", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7549bd3-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "0c74f09c-049a-474c-b34c-b2cbd9d77c04", "comment": "Malware payload (Mirai)", "value": "1f502d5e01900055e5e7e8f06a94ff9c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "75729f86-0b1f-4003-a638-d632900cb924", "comment": "Malware payload (Mirai)", "value": "2ccc768b112959c27d4155228d427853c845a4a85e60a0dc0cd116ce510c4209", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "42b7de0e-2066-43dd-9752-cc99acd5e42f", "value": "T1B2535C34ED792E27C0D8B27B52F78225F5EA130E24709A5D3CB90F8EBF1464468572", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "5411f224-10ca-41b2-84c0-0e99b9c48f4e", "value": "768:C7CwbSpWoXRtsLbSsY+YR1cBjDCl6WsFQi4hudG7IiSWgp3O+lh725FE84v8:Ozb8WszsLbecdDCl6vFUP8rluFx3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779081, "uuid": "abdffde1-3cf9-46d2-917a-53ef7702d9bf", "value": 62996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "cf93d418-5a20-4212-8840-a5aa4228c247", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7579735-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "f913bbfc-f165-4c71-817c-6bd3e0d9f44f", "comment": "Malware payload (Mirai)", "value": "b55aa4a2e5a89a385df045c039368b97", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "546d8489-70ef-40a7-8c9e-4f400d09b6b8", "comment": "Malware payload (Mirai)", "value": "daf47675231e33e98675ef40a8225a7a0cfec51551a16f3d332488f184baa395", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "238ccf58-91c8-47a7-8724-43e8882b7ebf", "value": "T188C2F179E551090EDA2FE532BB9CCA2FB2B9981173B592E142D821B7A03C11DB81CD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "e729bf64-5b9a-471c-8f14-df3bd057a68c", "value": "768:dYCTXXYNqXaPBIEPAF2z6zXMAHIfhw72Qf5/NPWNw:oi6uEP622bMAHIq6S/NPJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779081, "uuid": "04ddaa35-5465-4b9b-aee1-d79e3857757d", "value": 26092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "c6ea8291-720e-4d11-b9dd-82675913e098", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b75b6a05-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "f170dbaf-3954-4285-a60b-0c9a1ad96d97", "comment": "Malware payload (Mirai)", "value": "ff8d9310538f833ba4793cae4a2bfb15", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "ffd31e32-792c-44ec-bd42-2d9be2a5ec29", "comment": "Malware payload (Mirai)", "value": "790ff66eb7822abf4965867f796d3479f90ec13056e530b2e98c2713c78b9c4c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "47bb7993-dd34-437a-9b80-854992826633", "value": "T197C2D02C224AE1C9D07ACCB05D840BC06FBB8BB32512BD8B79CDE54B5AF54E6649D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "6d4c72bf-29df-4682-af68-69e80fac07b1", "value": "768:iyU59WnLstV4VPOcGLJVtKehawq+zJgGlzDpbuR1J7:5U59OLszKLwVdhTq+pVJuJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779081, "uuid": "d45d69e5-1df1-4989-a0c2-91ae7f70cf9f", "value": 27128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "60b30d3a-a352-4ba3-8954-919e1b3e2fa2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b783a1f7-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "c7c011e4-db01-45ec-a11d-7269b4bfd163", "comment": "Malware payload (Mirai)", "value": "fae715e35a7e81e9e1aeafefc2f2a9c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "e2bc7912-721d-4190-a228-75a934fb706e", "comment": "Malware payload (Mirai)", "value": "fc8ab24533513821d646d1d73a48d6a9bd95e4d3501ec35def43c4f155f8edec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "faad0e1b-366c-4852-9c2d-9b3f56fce0d7", "value": "T1AF338D60C5E8AE5CDB2986B8B6048939D723800975D33EFAE242C7A5D05BEDCF0497", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "86b6209f-556b-4e9b-94a3-720c5dd6e0a2", "value": "1536:Q/D6EWoG4aUNBsZ61DAM7fs3Kdi5Cs7bfCZaa:Qr6IHXC61DAsf+cjMbfa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779081, "uuid": "6a8197b9-aa9e-4492-bdb4-6699509d6da8", "value": 54844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779081, "uuid": "69b19d4f-cbed-47d5-b643-ebad8e5c2c4f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8fe137d-100e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779111, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779111, "uuid": "643a5359-c0c5-49af-bd2f-bb960cbbfb6f", "comment": "Malware payload (Mirai)", "value": "adadcaa69563979d48cb1a70ce995b94", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779111, "uuid": "6eebe8ab-522d-4124-a950-d97498f3ff4f", "comment": "Malware payload (Mirai)", "value": "6f51475872b573c1d9c137526e4b93841a3f3bb0519bac29aecfe11cf43743e9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779111, "uuid": "3800b5f7-16dc-4cdb-b1a9-13f0cbb86fef", "value": "T1F953025266BCE83BCFE2C1390B6801F645CC5DF46496900E53CA7DF88E06968EBDC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779111, "uuid": "b1f7dd03-ab7c-45d3-a3b8-aa0e7a30dc12", "value": "1536:Mdcqm5iERozq3p7o8FwOA4zCKOFGUfKbeH6UhV/uWAQd:MaHJgMo8FwOA4zUFGUO3UhARQd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779111, "uuid": "e481663a-270d-4d6a-8f5c-ad282e4d306a", "value": 63928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779111, "uuid": "466cc1ca-d9f1-4250-8684-9e6f827ab2d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d48f072-100f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779306, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779306, "uuid": "a7a969a4-6145-4e65-b15b-5a92164139b6", "comment": "Malware payload (Mirai)", "value": "a683ea26bd7d19d78d645136d6f49f59", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779306, "uuid": "cd19ad65-3b49-4e2b-889f-210850f8a2d7", "comment": "Malware payload (Mirai)", "value": "78ca110cc0afa6d75ebb522e740567d38e9271a6e82db00a503567aed0b53411", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779306, "uuid": "18f0fafa-2f9c-40b8-b606-69059d3c99f2", "value": "T12EB3BF87B1907ABEF0A45E3FC4135E26A6259F705583273D71FDF9906E3A3503292E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779306, "uuid": "d77ed60c-8b8e-428e-91d1-451a81139fef", "value": "1536:tdNSXAeuUGWnKYUqwaJ1Xq/3A5hcB57laZeCNjHWBOdiyWT15Ov6fHzr8rSR:t3SrlGWnKTU83AQB5A5Liy36fPUSR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779306, "uuid": "4331f9be-7fa4-4b41-9b4b-6238f393ddf8", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779306, "uuid": "6746954c-1462-4d89-bbb2-be00496304d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3067a45f-1010-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779714, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779714, "uuid": "4315faa0-6143-46cb-9672-dca4e671d989", "comment": "Malware payload (Mirai)", "value": "4d7b6aabffed17e2ab96a3d8fbde613f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779714, "uuid": "c89e6b27-e9c7-4564-90a5-f77e07c4c2d5", "comment": "Malware payload (Mirai)", "value": "8d2a6994a8fec5bb8a36bf92e115b08f39a785ed2084a1b8c77d445c7dfa9d16", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779714, "uuid": "cdd678bc-3d8b-418b-9e1c-516324969915", "value": "T1910429D7F800DDBAF80AE73708570905B630B7E600929B337257756BEC3A1991977E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779714, "uuid": "6251bfc9-09bb-42c7-8778-22d285953111", "value": "3072:16cnuTgsZgYtVSZgthVDf5YzegJ2Ej9/VNjbisLv1pNycAYAuh/F5QxQ:knDBYDFj9bLtpNycUqQxQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779714, "uuid": "705de87b-13f3-433f-a2b4-b574e2f29330", "value": 173280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779714, "uuid": "2f47d2d1-997a-41e8-ab6f-206e89ea1e1f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8acd64be-1010-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771779865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779865, "uuid": "550c46fe-9a37-4b12-95f3-9d6ca39e6147", "comment": "Malware payload (Mirai)", "value": "ad1b5695197b7f047323807a0158ac27", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779865, "uuid": "493f7379-0566-4c59-9015-38198eb3847f", "comment": "Malware payload (Mirai)", "value": "968de6ca10bd19e4f5e57af64283cad5d5e729e6848c042a1da1aa80bfb4cf96", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779865, "uuid": "66dd68bf-3683-4518-8fd2-cbc2a7743f63", "value": "T1B8D3C021E4006DD1EC2129F578BA97B80350EE740BDE1582EFFDF95E647BD9438AD2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779865, "uuid": "3d1fba26-0ee5-4b95-a884-4d1def8695b2", "value": "3072:PnicTtkAg7FSGp+VJE6AqUjq+c7zAbpb9/xa:PiySSGp+PMmT7zMplw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779865, "uuid": "f735664c-7482-434d-b23e-11d2e9174d0a", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779865, "uuid": "93c619be-ecb3-49d5-a4ac-5ac7b0f7fab2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c065f40a-1010-11f1-8369-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1771779955, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779955, "uuid": "4d00942f-13aa-48bc-a120-0baf6feb00d0", "comment": "Malware payload (GCleaner)", "value": "8832d465a35a32d50a6bb15868e556a9", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779955, "uuid": "6f518327-064c-4099-98ef-480016957f40", "comment": "Malware payload (GCleaner)", "value": "3aa70dd0a33c55610c3d7f1fab24dfa2812d7eb1530bf6dc0ba4bfab20ab6dc1", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779955, "uuid": "acda6e39-4232-4650-b130-5a76634fb4b2", "value": "T1BE159EF2A5E14437C1772A78AC1B96685835BE103B6C5846EBF80DC8BF376B374251", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779955, "uuid": "d5ec075c-e857-4c51-841c-13c20decfafa", "value": "fe4280c06246cc873fe89746dadec91e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779955, "uuid": "8e12e77c-a15a-4489-9602-dd5c6736e125", "value": "24576:2lluEBpPj6o4CPbE9taCbjIWxbpXY0DEBnZ:2lwa1VBCNmBnZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771779955, "uuid": "61ae76e3-219d-4a48-b39d-88331103a452", "value": 914432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771779955, "uuid": "b17ddf3a-a147-4d06-9afc-d858f3a46c37", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3489bc77-1011-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771780150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771780150, "uuid": "fc4ea21b-e9f5-45e6-9d03-5db3d3159663", "comment": "Malware payload (Mirai)", "value": "8a2476e1cb3cfbabaafbf0cd87af1d5a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771780150, "uuid": "eaa4b7bc-d8a6-442c-b4e1-d3ada3653a24", "comment": "Malware payload (Mirai)", "value": "8ef6a433af58469b464352be95cf7506fb4442a61d9ded2a53aab31ccab2167e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771780150, "uuid": "8b2a7fc9-2183-4421-8d8e-0862dca7b4cb", "value": "T1425302EA94E47ECCC29A5774060B49033EC673B8609A543BB3C4FA694AF1754CBD8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771780150, "uuid": "73318a27-a110-4ec4-a51f-9188aa52f602", "value": "1536:C1/S5aOdeB51F+yuXkoPgvFbFX6hTZ0f8ASAI+tLkg4azHJ:CM5az1Fy0oPgdZX6hTo8R2tLGazHJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771780150, "uuid": "d3b7f593-b8e1-4f99-8bcd-6365f7eca66d", "value": 60808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771780150, "uuid": "a281804d-22a1-4d41-bfc6-f3b414e3a0a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b3953d1-1022-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771787597, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771787597, "uuid": "e880e3f8-3baa-418a-a31f-f591be074b5d", "comment": "Malware payload", "value": "733b1f1b6c37585e89cae4f0cb14c38a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771787597, "uuid": "bc146b0c-c05f-4cca-9dd8-85058e3645d6", "comment": "Malware payload", "value": "87525c2726e884becd96d5a6ee0c8c2e66e382d4ab0f6dfb896e9ea0bbffe834", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771787597, "uuid": "8245c584-5f3b-454a-b8d1-4d939c251262", "value": "T11FC3D6DDB2E27025439324A5157F410AE27B2E553C4B8290D17EE9D4AC7CE8E817BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771787597, "uuid": "7e1ee20c-ab6a-4deb-aace-08d4ccb75ca0", "value": "1536:5wxqb5bdwL+pvFz9FSUsqLonQNYgetcVPkx2cnYteolbFr3rd6TcWmuZUfFi8AiE:5md+bz1VP9ftrdruZ5QZ3fav8rA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771787597, "uuid": "ef6ffc0e-39c2-44f3-ae07-135c4bee6ba3", "value": 121004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771787597, "uuid": "225410ba-b2d7-4110-a4a4-7e588cf99529", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24a03574-1025-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771788713, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771788713, "uuid": "b406f9ec-a22c-4c09-9aa0-808e3855608a", "comment": "Malware payload (Mirai)", "value": "5e463df3776aac25fd30c129a8002843", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771788713, "uuid": "3a504449-f076-4f78-aac7-bf3c42a29040", "comment": "Malware payload (Mirai)", "value": "7f09511c3371221ec53ab26c3d4ccee0cee7941d7dbd80cdbc99c144ea9908c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771788713, "uuid": "2c253fe6-0c95-4f8e-a35a-113fb7fa2609", "value": "T1D093390779C080FCC499C13056AFA23AC963F47E1239B19B63D4EE26BD8DE512F6D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771788713, "uuid": "3f646b9a-cea9-4533-acaa-016b06de4e77", "value": "1536:xl4orS5jKuaTTJjtevQZyY3ZA7b1b1mzi56oraiceGKRYDi8:xXsjK/TJ2QZ/3ZA1b1mzivraFenYi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771788713, "uuid": "0a5ec51b-6b55-471f-9e76-cb824770df5b", "value": 91776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771788713, "uuid": "41f8ccbb-8f92-4b7a-b7ab-5a805b328cb2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771718772, "uuid": "4c05dd8b-0f82-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.162.218:45969/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771719619, "uuid": "4556486a-0f84-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.94.31.225:35895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771720508, "uuid": "56e065e3-0f86-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/gop/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771721167, "uuid": "dfa239d3-0f87-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.120.191:35759/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771721490, "uuid": "a0297bfe-0f88-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.237.177.17:33570/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771721767, "uuid": "457a0f65-0f89-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.94.31.225:35895/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771721964, "uuid": "baf07bb5-0f89-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.203.49.47:53253/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771722326, "uuid": "928afd91-0f8a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.88.237:55891/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771722689, "uuid": "6b34ba55-0f8b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.120.191:35759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771723042, "uuid": "3d3134b1-0f8c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.87.138:60509/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771723525, "uuid": "5d83eb81-0f8d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.196.142:33928/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771723760, "uuid": "e9a1e2d4-0f8d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.220.188.36:56400/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771723822, "uuid": "0e23d0c3-0f8e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.68.77:46616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771724599, "uuid": "dd24a054-0f8f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.221.182:36926/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771724718, "uuid": "24881113-0f90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.176.220:53387/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771725140, "uuid": "20057128-0f91-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.176.220:53387/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771725315, "uuid": "8872470b-0f91-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.220.188.36:56400/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771725383, "uuid": "b0b84683-0f91-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.68.77:46616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771725547, "uuid": "129ee519-0f92-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.64.250.1:59565/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771726097, "uuid": "5a56063a-0f93-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.196.142:33928/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771726270, "uuid": "c1b1b437-0f93-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7180287117/wlmO7MF.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771726763, "uuid": "e73d0b2a-0f94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.14.169.186:48043/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771726890, "uuid": "3336fb39-0f95-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.148:54929/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771727187, "uuid": "e3fd323e-0f95-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.64.250.1:59565/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771727538, "uuid": "b50094e8-0f96-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.83.119:53303/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771727897, "uuid": "8b4c1c58-0f97-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.23.121:59392/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771728032, "uuid": "dbcae231-0f97-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.240.73.244:51487/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771728796, "uuid": "a343c3ac-0f99-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://76.72.238.154:46303/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771730236, "uuid": "fd82a298-0f9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://76.72.238.154:46303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771730736, "uuid": "276a8628-0f9e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.193.107.140:39836/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771730953, "uuid": "a8f926e1-0f9e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.0.236:38119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771731018, "uuid": "cf54aa29-0f9e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.107.134:36095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771731070, "uuid": "ee3c5742-0f9e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.89.253:47259/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771731258, "uuid": "5e4cce19-0f9f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.177.86:37573/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771731555, "uuid": "0f78cf17-0fa0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.240.73.244:51487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771731850, "uuid": "bfa4ef10-0fa0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.193.107.140:39836/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771732697, "uuid": "b84cd109-0fa2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.89.253:47259/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771732934, "uuid": "45914e4c-0fa3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.177.86:37573/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771733723, "uuid": "1b7fd270-0fa5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.192.127:52172/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771735157, "uuid": "727326bd-0fa8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.192.127:52172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771736536, "uuid": "a88baa73-0fab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.2.60:37043/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771737078, "uuid": "eb35f7d7-0fac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.202.84:47878/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771738336, "uuid": "d93a35f1-0faf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.202.84:47878/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771738519, "uuid": "4643a3ad-0fb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/a-r.m-6.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771738519, "uuid": "46454390-0fb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.82.145:34386/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771738576, "uuid": "686e8cd2-0fb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/x-3.2-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771738578, "uuid": "698a45bd-0fb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/a-r.m-7.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771738578, "uuid": "698a4762-0fb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/p-p.c-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771738578, "uuid": "698a49a0-0fb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/m-p.s-l.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771738578, "uuid": "698e16d7-0fb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/a-r.m-4.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771738578, "uuid": "69912306-0fb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/i-5.8-6.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771738578, "uuid": "69945e50-0fb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/s-h.4-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771738581, "uuid": "6b77b910-0fb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/m-6.8-k.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771738637, "uuid": "8ce8f15e-0fb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/m-i.p-s.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771738637, "uuid": "8ce90d6c-0fb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/x-8.6-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771738695, "uuid": "af990cba-0fb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/a-r.m-5.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771738815, "uuid": "f6c9fcda-0fb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.63:34953/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771740189, "uuid": "2994229f-0fb4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.93.248:60253/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771740682, "uuid": "4f6ed092-0fb5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.63:34953/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771740917, "uuid": "db86785d-0fb5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.93.248:60253/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771741453, "uuid": "1b3522b1-0fb7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.80.20:51355/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771741639, "uuid": "89eaae82-0fb7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.251.72:43798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771741808, "uuid": "ee81c085-0fb7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ojqxtq3l.ironrock.digital/?=check&&actmn=fzBbeQNmDlLbJgiw", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771742711, "uuid": "08e48ccb-0fba-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.3.0:47662/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771742836, "uuid": "53403fc5-0fba-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.3.43.31:54268/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771742899, "uuid": "7910bc1c-0fba-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.20.85:54066/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771743132, "uuid": "04078a50-0fbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.24.43:37278/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771743133, "uuid": "0463183e-0fbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.142.191:53939/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771743374, "uuid": "9480e2c6-0fbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.251.72:43798/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771743436, "uuid": "b9196199-0fbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.83.2:41962/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771744048, "uuid": "25e07422-0fbd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.119.220:45454/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771744158, "uuid": "67ae67a9-0fbd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.3.43.31:54268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771744277, "uuid": "aeb4d8c2-0fbd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.46.159:36257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771744340, "uuid": "d42fdeb2-0fbd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.10.155:45933/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771744585, "uuid": "663fea6b-0fbe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.3.0:47662/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771744593, "uuid": "6a8889d4-0fbe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.20.85:54066/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771744644, "uuid": "893dfdb4-0fbe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.142.191:53939/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771744754, "uuid": "cab33722-0fbe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.10.155:45933/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771744756, "uuid": "cbb1a5f9-0fbe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.24.43:37278/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771744895, "uuid": "1eafa8ae-0fbf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.33.106:60411/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771745539, "uuid": "9ede60bd-0fc0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.236.160.24:35847/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771745781, "uuid": "2f1f70cf-0fc1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.119.220:45454/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771746020, "uuid": "bd89891d-0fc1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.176.6:45761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771746440, "uuid": "b7d11309-0fc2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.59.116:59619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771746498, "uuid": "da060f90-0fc2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.5.237:58222/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771746548, "uuid": "f833fe09-0fc2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.181:57114/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771746681, "uuid": "4723c2f5-0fc3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.59.116:59619/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771746739, "uuid": "6a040512-0fc3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.222.252:49815/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771747029, "uuid": "16e0c63a-0fc4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://0uwsxbye.forward3cross.digital/?=check&&actmn=FRzyCUUYRXAJjqPn", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771747158, "uuid": "63ec782b-0fc4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.113.91:47005/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771747517, "uuid": "39827b02-0fc5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.176.6:45761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771747574, "uuid": "5b751caa-0fc5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.73.221.161:47065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771747641, "uuid": "83ae2aff-0fc5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.82.145:34386/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771747700, "uuid": "a6e19155-0fc5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.178:36308/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771747821, "uuid": "eef4670e-0fc5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.5.237:58222/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771748048, "uuid": "75ded8fa-0fc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://allcheat.netlify.app/rpExecuter.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771748049, "uuid": "76b11d36-0fc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.25.63.150/Q.GRE", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "NetSupportRAT", "colour": "#d30a30", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771748051, "uuid": "78165b6d-0fc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://eploits.info/J%D0%BE%D1%83%D1%81it%D1%83%20v2.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "password: 2026", "colour": "#a65f14", "exportable": true, "hide_tag": false }, { "name": "pw-2026", "colour": "#4d3d79", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771748052, "uuid": "789fed1e-0fc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://deusxeno.ws/Bootstap%D1%80%D0%B5%D0%B3%D1%83ossUl.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: ryos", "colour": "#51c7ee", "exportable": true, "hide_tag": false }, { "name": "pw-ryos", "colour": "#201b00", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771748057, "uuid": "7ba78573-0fc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://gudiop.lol/downloads", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: bluys", "colour": "#d0fede", "exportable": true, "hide_tag": false }, { "name": "pw-bluys", "colour": "#5a7771", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771748060, "uuid": "7d0a648a-0fc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.36.244:49087/Mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771748061, "uuid": "7e0ce04f-0fc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lun.onters.sbs/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771748064, "uuid": "7f9d881c-0fc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://product.360academybd.com/ssldcs.exe", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771748107, "uuid": "993605c1-0fc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://gatepass-corp.com/toljhnxgvhcsfduwzf", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771748114, "uuid": "9d6a42cf-0fc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://deusxeno.ws/Bootstap%D1%80%D0%B5r%D1%83%D0%BEsUI.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: ryos", "colour": "#51c7ee", "exportable": true, "hide_tag": false }, { "name": "pw-ryos", "colour": "#201b00", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771748117, "uuid": "9f7f38a4-0fc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lunp.revio.live/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771748121, "uuid": "a1db9b9a-0fc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.170.255/webdav", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771748160, "uuid": "b8a6a5de-0fc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lunc.revio.live/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771748420, "uuid": "53ddd5e4-0fc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.189.20:47069/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771749187, "uuid": "1d04a886-0fc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://odbsasjd.upgrade4file.digital/?=check&&actmn=aIjlDJUshdaUlwoM", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771749382, "uuid": "9139c498-0fc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.132.110:37974/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771749848, "uuid": "a6c0823b-0fca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5698774781/dzeFptZ.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771749919, "uuid": "d19d3522-0fca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.13.174/n2/mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771749919, "uuid": "d19ebc5b-0fca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.13.174/n2/x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771749919, "uuid": "d19ebc61-0fca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.13.174/n2/mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771749919, "uuid": "d19ec17a-0fca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.13.174/n2/armv6l", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771749973, "uuid": "f14b4208-0fca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.13.174/n2/armv7l", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771749973, "uuid": "f14b4679-0fca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.13.174/n2/armv5l", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771749973, "uuid": "f14be5ac-0fca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.13.174/n2/aarch64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750031, "uuid": "141093ed-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.13.174/n2/armv4l", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750031, "uuid": "1415d806-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.86.181:57114/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750097, "uuid": "3b658378-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.113:235/logic.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750097, "uuid": "3b717149-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.163.77/n2/mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750097, "uuid": "3b749c19-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.163.77/n2/x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750097, "uuid": "3b749e22-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.163.77/n2/mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750098, "uuid": "3c0aca76-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.82/cat.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750109, "uuid": "428c0852-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.101.21", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750207, "uuid": "7d327f93-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.82/iran.sparc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750207, "uuid": "7d37fa48-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.82/iran.armv6l", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750207, "uuid": "7d47637c-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.82/iran.mipsel", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "848d7103-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.82/iran.armv5l", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "848d9913-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.82/iran.armv4l", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "848dac31-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.82/iran.i486", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "849161c4-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.82/iran.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "8491641b-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.82/iran.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "849a5aaf-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.82/iran.armv7l", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "849d32dd-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.82/iran.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "849eaf3d-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.82/iran.x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "84a0bc14-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.82/iran.arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "84a0bd7c-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.82/iran.aarch64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750220, "uuid": "84ac8c46-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.82/iran.powerpc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750276, "uuid": "a6250bbd-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.113:235/x86_64.kok", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750276, "uuid": "a62650b0-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.113:235/arm7.kok", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750276, "uuid": "a6352a88-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.113:235/x86_32.kok", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750329, "uuid": "c5842521-0fcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.170.86:45446/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750454, "uuid": "1029b803-0fcc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.108.153:42558/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750537, "uuid": "41866884-0fcc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.237.0.239:42213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750933, "uuid": "2dadf3ca-0fcd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.108.153:42558/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771750933, "uuid": "2e0526da-0fcd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.237.0.239:42213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771751053, "uuid": "75550056-0fcd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.19.174:36579/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771751062, "uuid": "7a8ee2f9-0fcd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.239.146:38615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752131, "uuid": "f80e1785-0fcf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.248.67:39491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "3ea6919e-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.59.129.233/nuts/poop", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "3ea9ecda-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.227/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "3ea9f016-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/huhu/titanjr.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "3eac134b-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.227/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "3eba6ef5-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/huhu/titanjr.x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "3ecbd129-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.42.212.97/huhu/titanjr.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "3ed71562-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.42.212.97/huhu/titanjr.x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "3eed5afc-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/huhu/titanjr.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "3eefd5b3-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.65.3.72/csk_x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752250, "uuid": "3ef1fe5f-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/titanjr.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752251, "uuid": "3f0fbb13-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/titanjr.x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752258, "uuid": "436d0330-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/titanjr.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752258, "uuid": "43c65f33-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/huhu/titanjr.x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752259, "uuid": "43e8d29e-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.90.163.37/debug.dbg", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752259, "uuid": "43f718b3-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.140/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752259, "uuid": "43f8f8ec-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.140/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752259, "uuid": "440bf968-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.181.3.211/arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752259, "uuid": "441f89ab-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.65.3.72/csk_arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752260, "uuid": "4472c85a-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.148.103.189/arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752313, "uuid": "6444d85f-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.90.163.37/ohshit.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752313, "uuid": "644c7409-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/all.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752313, "uuid": "644e013c-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.42.212.97/all.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752366, "uuid": "8417826a-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.237.217/cbot/raw_cbot.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752366, "uuid": "841f5305-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.237.217/cbot/raw_cbot_debug.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752366, "uuid": "84206cfc-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.237.217/cbot/cbot.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752366, "uuid": "84216a24-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.237.217/cbot/cbot_debug.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752377, "uuid": "8a885425-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.227/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752377, "uuid": "8a9608e9-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.140/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752377, "uuid": "8aacb6da-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.140/bins/xnxnxnxnxnxnxnxnmipsxnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752377, "uuid": "8aacdee4-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.227/bins/xnxnxnxnxnxnxnxnmipsxnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752377, "uuid": "8aaeb2c2-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/all.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752378, "uuid": "8aca2a87-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.227/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752380, "uuid": "8c6d3792-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.59.129.233/nuts/bolts", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8cbdd985-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.227/bins/xnxnxnxnxnxnxnxnm68kxnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8cc1da7c-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.227/bins/xnxnxnxnxnxnxnxnsh4xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8cc307d8-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.227/run.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8cc44862-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.140/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8cc61ea9-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.140/bins/xnxnxnxnxnxnxnxni386xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8cc9fb01-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.227/bins/xnxnxnxnxnxnxnxnor1kxnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8ccb67e8-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.227/bins/xnxnxnxnxnxnxnxni386xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8ccee176-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.140/bins/xnxnxnxnxnxnxnxnm68kxnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8ccee424-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.227/bins/xnxnxnxnxnxnxnxnsh2xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8cd37cb6-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.140/bins/xnxnxnxnxnxnxnxnsh4xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8cd8e931-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.140/bins/xnxnxnxnxnxnxnxnsh2xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8cd93149-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.227/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8cdb3e92-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.227/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8cdb5b36-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.140/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8cdf16fb-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.140/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8ce74b53-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.140/bins/xnxnxnxnxnxnxnxnor1kxnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8ceba45b-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.173.41/run.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8cee8af0-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.227/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752381, "uuid": "8ceec587-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.140/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752427, "uuid": "a83a5c91-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7615186854/gZNlw1R.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752438, "uuid": "ae85abf5-0fd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.248.67:39491/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752617, "uuid": "1934ab9d-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.173.41/bins/xnxnxnxnxnxnxnxni386xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752617, "uuid": "1934ad8e-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.173.41/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752617, "uuid": "1934add3-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.173.41/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752617, "uuid": "1934c3bc-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.173.41/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752617, "uuid": "1936cf63-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.173.41/bins/xnxnxnxnxnxnxnxnsh2xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752617, "uuid": "1940775d-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.173.41/bins/xnxnxnxnxnxnxnxnm68kxnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752617, "uuid": "194079f3-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.173.41/bins/xnxnxnxnxnxnxnxnmipsxnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752617, "uuid": "19407a14-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.173.41/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752617, "uuid": "1940831f-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.173.41/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752617, "uuid": "194095bc-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.173.41/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752617, "uuid": "19409ab6-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.173.41/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752617, "uuid": "19409b15-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.173.41/bins/xnxnxnxnxnxnxnxnsh4xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752617, "uuid": "19413a0f-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.21.173.41/bins/xnxnxnxnxnxnxnxnor1kxnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752790, "uuid": "80d4b21d-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.90.163.37/network/bin.i468", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752792, "uuid": "81ecf4bc-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/huhu/titanjr.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752792, "uuid": "81efc67d-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.90.163.37/network/bin.x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752792, "uuid": "81f4c0d7-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.90.163.37/network/bin.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752793, "uuid": "822b0dbf-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/huhu/titanjr.x86_32", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752793, "uuid": "822e61ce-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/huhu/titanjr.i486", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752793, "uuid": "823ac81c-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.42.212.97/huhu/titanjr.x86_32", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752793, "uuid": "8245a2cf-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.42.212.97/huhu/titanjr.ppc440", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752793, "uuid": "8245b40f-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.42.212.97/huhu/titanjr.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752796, "uuid": "83fddfbb-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.90.163.37/network/bin.i686", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752796, "uuid": "84008e33-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.90.163.37/network/bin.arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "873479a5-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/huhu/titanjr.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "8735a363-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/huhu/titanjr.mipsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "873772a9-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.90.163.37/network/bin.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "873f8118-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/huhu/titanjr.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "8745ba62-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.90.163.37/network/bin.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "8748b007-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.90.163.37/network/bin.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "874e54fd-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/huhu/titanjr.x86_32", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "87503617-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/huhu/titanjr.arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "8754c3fe-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/huhu/titanjr.i686", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "875723f9-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/huhu/titanjr.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "875fa4c8-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.90.163.37/network/bin.mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752801, "uuid": "8761db2f-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.42.212.97/huhu/titanjr.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "87747e66-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/huhu/titanjr.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "8774865a-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/huhu/titanjr.ppc440", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "8774d104-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.42.212.97/huhu/titanjr.arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "877a3e3b-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/huhu/titanjr.arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "877a6872-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/huhu/titanjr.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "877f4387-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/huhu/titanjr.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "87809928-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.42.212.97/huhu/titanjr.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "878acc84-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.90.163.37/network/bin.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "878cff26-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/huhu/titanjr.arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "87924ef1-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/huhu/titanjr.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "87946184-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.42.212.97/huhu/titanjr.i486", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "87947f74-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.42.212.97/huhu/titanjr.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "8797e924-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/huhu/titanjr.ppc440", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "87a107f5-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/huhu/titanjr.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "87a1560b-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/huhu/titanjr.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "87a3ef55-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.42.212.97/huhu/titanjr.mipsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "87a5ead5-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.42.212.97/huhu/titanjr.i686", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752802, "uuid": "87a98849-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.90.163.37/network/bin.spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752806, "uuid": "8a251a51-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.90.163.37/network/bin.arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752806, "uuid": "8a2582d2-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.90.163.37/network/bin.x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752806, "uuid": "8a3f49ae-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/huhu/titanjr.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752806, "uuid": "8a5794be-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.90.163.37/network/bin.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752807, "uuid": "8aee0fde-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/huhu/titanjr.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752808, "uuid": "8b126b85-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.42.212.97/huhu/titanjr.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752808, "uuid": "8b126e3d-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.42.212.97/huhu/titanjr.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752808, "uuid": "8b2fe806-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.42.212.97/huhu/titanjr.arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752810, "uuid": "8c50d371-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/huhu/titanjr.i486", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752812, "uuid": "8dce6081-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/huhu/titanjr.mipsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752812, "uuid": "8dd5c850-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/huhu/titanjr.i686", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752856, "uuid": "a81ab6ef-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.90.163.37/network/bin.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752856, "uuid": "a82ab4e5-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/huhu/titanjr.arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752908, "uuid": "c6f2166a-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://idk.mangovn.xyz/csk_x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752912, "uuid": "c970e7d9-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://idk.mangovn.xyz/csk_arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752973, "uuid": "edd187c4-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.65.3.72/csk_arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752973, "uuid": "edd203d8-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.65.3.72/csk_mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752973, "uuid": "eddec68d-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://idk.mangovn.xyz/csk_arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752973, "uuid": "ede5133a-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.65.3.72/csk_arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752974, "uuid": "edf4b85e-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.65.3.72/csk_mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752974, "uuid": "edfaf59c-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.65.3.72/csk_arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752974, "uuid": "ee04541f-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.65.3.72/csk_m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752974, "uuid": "ee0553a7-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.65.3.72/csk_x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752974, "uuid": "ee1490d6-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://idk.mangovn.xyz/csk_arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752974, "uuid": "ee36e4da-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://idk.mangovn.xyz/csk_m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752974, "uuid": "ee419e50-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://idk.mangovn.xyz/csk_mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752975, "uuid": "ee93697b-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://idk.mangovn.xyz/csk_ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752975, "uuid": "ee9c3b45-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.65.3.72/csk_ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752975, "uuid": "ee9f3d85-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://idk.mangovn.xyz/csk_arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752975, "uuid": "ee9f3dc5-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://idk.mangovn.xyz/csk_mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771752975, "uuid": "eeaf906d-0fd1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://idk.mangovn.xyz/csk_x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771753028, "uuid": "0e708b38-0fd2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.214.82.110:40924/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771753155, "uuid": "5a0bb79d-0fd2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.140/android.exploit", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771753156, "uuid": "5a74293e-0fd2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.170.86:45446/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771753398, "uuid": "eabc7a71-0fd2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.140.10:45313/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771753690, "uuid": "992e7ae4-0fd3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.189.20:47069/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771753811, "uuid": "e1564f29-0fd3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.41:45570/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754774, "uuid": "1ef77c34-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/titanjr.x86_32", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754774, "uuid": "1efb419b-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/titanjr.arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754774, "uuid": "1f1b3693-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/titanjr.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754774, "uuid": "1f1ca684-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/titanjr.i686", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754774, "uuid": "1f4d1ecc-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/titanjr.i686", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754774, "uuid": "1f4fde16-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/titanjr.ppc440", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754774, "uuid": "1f59e253-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/titanjr.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754774, "uuid": "1f5c4f2d-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/titanjr.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754774, "uuid": "1f5fb123-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/titanjr.i486", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754774, "uuid": "1f69bc78-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/titanjr.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754775, "uuid": "1f7451b5-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/titanjr.arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754775, "uuid": "1f74f5bf-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/titanjr.mipsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754775, "uuid": "1f774f5f-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/titanjr.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754775, "uuid": "1f7aa6d8-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/huhu/titanjr.spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754775, "uuid": "1f7b25b4-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/titanjr.ppc440", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754775, "uuid": "1f7b3774-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.42.212.97/huhu/titanjr.spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754775, "uuid": "1f7cd0d6-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/titanjr.x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754775, "uuid": "1f7ce3dd-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/titanjr.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754775, "uuid": "1f819fff-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/titanjr.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754775, "uuid": "1f81ab46-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/titanjr.arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754775, "uuid": "1f82ccd7-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/titanjr.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754775, "uuid": "1f89ab61-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/titanjr.i486", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754775, "uuid": "1f89ad99-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/titanjr.x86_32", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754775, "uuid": "1f8d8535-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/titanjr.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754775, "uuid": "1f91e4d4-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.239.87.229/titanjr.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754775, "uuid": "1fbe5caa-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/huhu/titanjr.spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754837, "uuid": "44dd86a9-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/titanjr.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754837, "uuid": "44ddaff7-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/titanjr.arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754897, "uuid": "6887ca05-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/titanjr.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771754957, "uuid": "8c141884-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.26/titanjr.mipsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771755011, "uuid": "ac4628c1-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.140.10:45313/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771755077, "uuid": "d3bc4fb0-0fd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.36.114:39989/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771755308, "uuid": "5d769091-0fd7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.94:45611/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771755795, "uuid": "7f7466c4-0fd8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.100.162:50858/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771755975, "uuid": "eadb9f99-0fd8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.21.232:44372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771756036, "uuid": "0f7a0af9-0fd9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.41:45570/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771756218, "uuid": "7c1f4684-0fd9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.100.162:50858/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771756327, "uuid": "bcb6ad35-0fd9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://366kf0hf.up12file.digital/?=check&&actmn=SeKeSbevZsJAERVj", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771756577, "uuid": "5219ba78-0fda-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.40.215:33743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771756635, "uuid": "7454f1ef-0fda-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.29.227:51696/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771756940, "uuid": "29e6b127-0fdb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.108.161:46336/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757347, "uuid": "1c81a522-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.91.133.229/download/beedv1.rar", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757350, "uuid": "1e609a00-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.1.254:38244/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757350, "uuid": "1ea22cc7-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.91.133.229/download/drivev1.rar", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757356, "uuid": "22265e08-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.91.133.229/download/UpdaterServices2.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757356, "uuid": "225daf1b-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.91.133.229/download/UpdaterServices.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757358, "uuid": "238f41d8-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.91.133.229/download/upbot.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757365, "uuid": "27848bf2-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.91.133.229/download/drivev11.rar", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757369, "uuid": "2a2bc8ba-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.91.133.229/download/UpdaterServices1.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757372, "uuid": "2b863efe-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.91.133.229/download/botseo.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757378, "uuid": "2f34b793-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.91.133.229/download/UpdaterServices4.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757379, "uuid": "2ffc9ed4-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.91.133.229/download/UpdaterServices3.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757527, "uuid": "87ce4d5a-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ic.hopto.org/download/beedv1.rar", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757531, "uuid": "8ab92007-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ic.hopto.org/download/upbot.exe", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757533, "uuid": "8ba3d7e5-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ic.hopto.org/download/drivev1.rar", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757538, "uuid": "8edf7d04-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ic.hopto.org/download/drivev11.rar", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757539, "uuid": "8eedb9d3-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ic.hopto.org/download/UpdaterServices3.exe", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757541, "uuid": "901bdbf6-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ic.hopto.org/download/UpdaterServices4.exe", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757541, "uuid": "901f8311-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ic.hopto.org/download/UpdaterServices.exe", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757541, "uuid": "908fe91f-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ic.hopto.org/download/UpdaterServices2.exe", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757546, "uuid": "9377c156-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ic.hopto.org/download/UpdaterServices1.exe", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757552, "uuid": "9713cab8-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ic.hopto.org/download/botseo.exe", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757717, "uuid": "f9619060-0fdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.162.195.238:56417/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771757950, "uuid": "8466902f-0fdd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.109.219.240:57979/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771758020, "uuid": "add91122-0fdd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.40.215:33743/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771758367, "uuid": "7d057f81-0fde-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.222.252:49815/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771758368, "uuid": "7d18cf0e-0fde-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.29.227:51696/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771758975, "uuid": "e756b151-0fdf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.90.172:36922/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771758975, "uuid": "e760a7f9-0fdf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.39.109:34878/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759215, "uuid": "7669997a-0fe0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.182.211:25196/linux_mips64el", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "793e7f16-0fe0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.182.211:25196/linux_386", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "794127d5-0fe0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.182.211:25196/linux_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "794a58d5-0fe0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.182.211:25196/linux_aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "795c456d-0fe0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.182.211:25196/linux_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "7966784d-0fe0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.182.211:25196/linux_amd64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "79689af9-0fe0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.182.211:25196/linux_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "796afc59-0fe0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.182.211:25196/linux_mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "796e974a-0fe0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.182.211:25196/linux_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759220, "uuid": "79725158-0fe0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.182.211:25196/linux_mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771759694, "uuid": "938dde88-0fe1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.247.228:57798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771760411, "uuid": "3f2fc2db-0fe3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.39.109:34878/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771760472, "uuid": "638fabbf-0fe3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.33.237.219:2000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771760474, "uuid": "64620736-0fe3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.162.238.194/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771760717, "uuid": "f53cefba-0fe3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.143.171.155:50112/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771760832, "uuid": "3a33b9bb-0fe4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.27.85:57950/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771761016, "uuid": "a762b330-0fe4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.232.223:39739/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771761249, "uuid": "3279b400-0fe5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/1781548144/3BXsQpC.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771762099, "uuid": "2d31afe0-0fe7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.161.2:58459/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771762156, "uuid": "4f3468e1-0fe7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.200.7:51440/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771762336, "uuid": "ba2f537d-0fe7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.232.223:39739/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771762459, "uuid": "03aff3a2-0fe8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.95.229:44641/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771762926, "uuid": "19e3cc24-0fe9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://r8ada0zp.novacode.digital/?=check&&actmn=cvnwONogSTzZaomy", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771762953, "uuid": "2a7f6e03-0fe9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.203.95.20:59075/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771763001, "uuid": "47153096-0fe9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.203.95.20:59075/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771763420, "uuid": "4057fe94-0fea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.161.2:58459/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771763531, "uuid": "82ff4ad8-0fea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.39.252:44510/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764320, "uuid": "58bbe2a2-0fec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.247.228:57798/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764322, "uuid": "59e503ba-0fec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.39.252:44510/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764373, "uuid": "78d8ba90-0fec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.51:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764374, "uuid": "79063a43-0fec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.55/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764377, "uuid": "7b30696f-0fec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.50:8443/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764380, "uuid": "7cf81350-0fec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.186.54:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764383, "uuid": "7eba4096-0fec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.159.99.175:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764428, "uuid": "993e99d3-0fec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.55/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764428, "uuid": "99452b50-0fec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.51:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764428, "uuid": "99639d73-0fec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.25/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764428, "uuid": "9965b623-0fec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.50:8443/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764428, "uuid": "9978ac2e-0fec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.241.211.61/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764428, "uuid": "997ff8f7-0fec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.67/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764428, "uuid": "998a0d9a-0fec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://91.206.169.134/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764428, "uuid": "99a0a9d3-0fec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.83.31.75/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764432, "uuid": "9bf17a50-0fec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.67/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764485, "uuid": "bb89bab9-0fec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.154.98.164/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764729, "uuid": "4cc7ec3a-0fed-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.90:49886/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771764743, "uuid": "54e5f29b-0fed-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/rq0anbhkd976/assets/js/o5a0j5tug8?token=PeOtaCY5NmzmOSDVm0BX9UDM8lJijstK", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765152, "uuid": "4921777e-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.33.188:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765152, "uuid": "4924a881-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.198.131.40:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765152, "uuid": "49327093-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.159.99.111:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765152, "uuid": "4932fe68-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.83.31.104/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "4934a86d-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.132.197/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "493b89b9-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.94/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "49456ba4-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.141.215.124/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "4946e07f-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.225/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "4953b658-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.83.31.230/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "4958247c-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.198.131.54:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "495c5671-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.82/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "495e0385-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.198.131.103:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "495f75c5-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.31/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "496672fa-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.179/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "4967f22c-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.88/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "496f22c5-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.107/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "49716656-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.135/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "4978420a-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.33.122:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "497b04c6-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.83.31.211/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "497b4d02-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://194.26.192.109/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "497f48a6-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.31.142:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "497fb3d5-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.198.132.185:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "4982b07e-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.159.99.219:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "4982e30d-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.132.54/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "498a6ad0-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.141.215.7/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "498b5e3f-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.248/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "498dbaa8-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.94.31.23/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "498ed9dc-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.159.99.34/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "498fde6b-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.94.31.176/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "49916167-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.159.99.131:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "499420c3-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.126/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "49976b29-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.205/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "4997794f-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.241.211.118/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "49997dc7-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.23/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "499b0ab0-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.236/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "49a16657-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.154.98.212/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "49b30d4b-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.99:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765153, "uuid": "49b3ada2-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.216/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765154, "uuid": "49d8dcb6-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://2.58.56.134/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765154, "uuid": "49db7aa2-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.159.99.178:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765161, "uuid": "4e731ca1-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.241.208.151:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765161, "uuid": "4e851f0e-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.94.31.116:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765161, "uuid": "4e857024-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.115/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765161, "uuid": "4e8a23e1-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.94.31.109/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4e9ae139-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.94.31.59/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4ea5a897-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.47/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4ea884e4-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.52/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4eab5137-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.94.31.102/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4eb0511f-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.58.56.236:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4eba8063-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://192.159.99.98/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4ebe7ff7-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.33.34:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4ebfb46a-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.163/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4ec086de-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://84.54.33.133/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4ec7bc19-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.58.56.71:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4ec80752-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.42/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4ec9240c-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.140/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4ed3583f-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.26/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4ed36010-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.192:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4edb9d03-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.241.208.173/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4edbe4ee-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.241.211.64/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4edf3e5b-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.83.31.248/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4edf3ebf-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.173/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4ee0657b-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://192.159.99.119/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4eedfa38-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.94.31.192/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4ef04872-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.186.149:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4ef362f7-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.154.98.223/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4f153d3b-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://2.58.56.46/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4f1669f6-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.83.31.116/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4f1b338f-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.154.98.32/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4f22ba8b-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.94.31.164:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4f22bfee-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.34/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4f25e0f3-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.94.31.57:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4f25ee47-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.226/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765162, "uuid": "4f277d5a-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.186.26:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765163, "uuid": "4f31bb37-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.242/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765163, "uuid": "4f343904-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.198.131.248:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765163, "uuid": "4f46edf3-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.241.208.122:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765163, "uuid": "4f75dbe9-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.83.31.132/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765163, "uuid": "4f9de031-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.241.211.6/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765165, "uuid": "50b2ce40-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.138.16.201/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765165, "uuid": "50d531fd-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.198.131.144/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765165, "uuid": "50dabf6f-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.188/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765165, "uuid": "50e008a0-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://192.159.99.67/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765165, "uuid": "50eae6d6-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.186.69/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765165, "uuid": "50f0e83f-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.124/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765165, "uuid": "50f3b3a0-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.149/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765166, "uuid": "50fc24a2-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.198.131.213:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765166, "uuid": "5109c381-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.147:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765166, "uuid": "5113bd77-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.132.186/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765209, "uuid": "6ab4aeca-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.94.31.141/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765209, "uuid": "6ab8ff37-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.94.31.63:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765209, "uuid": "6ad6e564-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.31.24:8040/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765209, "uuid": "6ae4ff6d-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.154.98.229/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765289, "uuid": "9acbb041-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.96.60:57533/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765334, "uuid": "b57a49f6-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.141.215.10/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765334, "uuid": "b57fb6c9-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.94.31.90:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765334, "uuid": "b58827ac-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://2.58.56.46/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765334, "uuid": "b58be2a7-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.33.122:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765334, "uuid": "b595759f-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.154.98.223/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765341, "uuid": "b9a617b5-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.198.131.103:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765342, "uuid": "ba320758-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.138.16.201/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765342, "uuid": "ba37feba-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.198.132.185:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765343, "uuid": "bab06b0d-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.242/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765343, "uuid": "bad33387-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.184/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765344, "uuid": "bb8676b8-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.88/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765344, "uuid": "bb86918f-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.33.34:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765350, "uuid": "befaa328-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.124/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765350, "uuid": "bf0f96a4-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.179/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765354, "uuid": "c152e1c1-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://192.159.99.55/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765354, "uuid": "c1762cd2-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.186.79:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765355, "uuid": "c216e0c6-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.215.15:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765359, "uuid": "c449f8df-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.188/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765360, "uuid": "c4fb5a25-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.154.98.229/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765361, "uuid": "c5aca60d-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.241.211.6/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765362, "uuid": "c5d863dc-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.151/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765375, "uuid": "cdef88e4-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.83.31.230/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765378, "uuid": "cfb0c002-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.58.56.71:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765378, "uuid": "cfcefeb2-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.132.54/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765379, "uuid": "d066bcbb-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.23/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765383, "uuid": "d2a8e87b-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.159.99.219:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765383, "uuid": "d2d081ee-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.198.131.248:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765384, "uuid": "d2f48edb-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.132.186/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765384, "uuid": "d2f71110-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.83.31.82/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765384, "uuid": "d2f88e93-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.94.31.116:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765384, "uuid": "d321e200-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.159.99.61:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765384, "uuid": "d35a0add-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.83.31.198/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765384, "uuid": "d3738ec0-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.115/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765385, "uuid": "d38b5288-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://192.159.99.123/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765385, "uuid": "d38da39e-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.192:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765388, "uuid": "d5a26038-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.94.31.57:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765389, "uuid": "d613d665-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.52/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765389, "uuid": "d620eb4b-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.82/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765390, "uuid": "d6f81373-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://84.54.33.133/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765390, "uuid": "d70b09db-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.241.208.173/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765390, "uuid": "d70d328e-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.140/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765391, "uuid": "d77b55f2-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.226/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765392, "uuid": "d8377a2f-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.159.99.152:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765395, "uuid": "d9e77866-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.141.215.7/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765395, "uuid": "da09d73e-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.159.99.131:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765396, "uuid": "da0e43fa-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.94/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765401, "uuid": "dd8b3fd6-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.83.31.248/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765405, "uuid": "dfc07f00-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.47/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765405, "uuid": "dfd1fb26-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.31.24:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765405, "uuid": "dfedba5f-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.26/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765406, "uuid": "e0090b9d-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.132.197/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765406, "uuid": "e01ce02c-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.83.31.110/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765406, "uuid": "e01fdbe8-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.80.158.86/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765410, "uuid": "e297b45f-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.186.26:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765410, "uuid": "e297b890-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.34/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765410, "uuid": "e2e68999-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://194.26.192.109/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765411, "uuid": "e31759cf-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.83.31.128/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765418, "uuid": "e7a47404-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.94.31.176/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765418, "uuid": "e7a4b6ab-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.83.31.211/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765423, "uuid": "ea68dd90-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.65:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765423, "uuid": "ea695dec-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.159.99.111:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765424, "uuid": "eb1043f2-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.225/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765425, "uuid": "eba4bcc6-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.33.188:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765426, "uuid": "ec1a387d-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.83.31.116/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765428, "uuid": "ed1ed946-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.147:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765428, "uuid": "ed4ee681-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.94.31.63:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765428, "uuid": "eda34126-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.186.69/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765429, "uuid": "edb7be45-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.248/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765429, "uuid": "edb8ded6-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.198.132.212:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765429, "uuid": "ede4a01f-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.135/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765429, "uuid": "ede5a945-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.141.215.124/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765431, "uuid": "ef2d9e17-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.126/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765433, "uuid": "f05c5506-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.42/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765433, "uuid": "f05ec653-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.159.99.34/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765433, "uuid": "f062390e-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.154.98.212/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765433, "uuid": "f0656746-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.141.215.47/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765435, "uuid": "f1b6676e-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.35/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765435, "uuid": "f1bbd74f-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.80.158.96/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765435, "uuid": "f1bde535-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.241.211.118/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765435, "uuid": "f1c4d518-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.241.208.122:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765435, "uuid": "f1c4ef9d-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.241.211.64/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765435, "uuid": "f1c6328d-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.99:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765435, "uuid": "f1c68772-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.198.131.144/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765436, "uuid": "f20500b0-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.58.56.235:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765436, "uuid": "f2053225-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.205/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765453, "uuid": "fc1e6b8f-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.159.99.178:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765453, "uuid": "fc955f18-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.163/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765454, "uuid": "fca5a0d7-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.159.99.108:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765454, "uuid": "fcae4c72-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.94.31.141/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765454, "uuid": "fcb5bb51-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.94.31.102/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765454, "uuid": "fcb62b71-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.132.238:8443/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765455, "uuid": "fd72f272-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.77/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765455, "uuid": "fd8047e6-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.195/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765455, "uuid": "fd80a9b5-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.132.211/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765455, "uuid": "fd8228de-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.198.131.123:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765455, "uuid": "fd8413a2-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.200/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765455, "uuid": "fd901f43-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.107/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765455, "uuid": "fd949f7c-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.198.131.54:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765457, "uuid": "fed5816d-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.216/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765457, "uuid": "fefe4d85-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.58.56.236:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765458, "uuid": "ff147c0d-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://2.58.56.228/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765458, "uuid": "ff80b3e0-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://192.159.99.98/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765458, "uuid": "ff95e5c1-0fee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.83.31.132/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765459, "uuid": "00001eb3-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.159.99.206:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765466, "uuid": "03cc3f26-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://192.159.99.119/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765466, "uuid": "03e301d4-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.198.131.213:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765466, "uuid": "03e6359f-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.241.208.151:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765466, "uuid": "03e817eb-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.149/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765466, "uuid": "03f2afa8-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.94.31.23/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765467, "uuid": "04b585a6-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.94.31.109/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765467, "uuid": "04bc4a63-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.198.131.40:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765473, "uuid": "0815efad-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.83.31.104/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765473, "uuid": "0815fb91-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.154.98.32/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765473, "uuid": "081f9ab6-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.186.149:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765473, "uuid": "0831389d-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://2.58.56.134/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765473, "uuid": "083468a6-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.94.31.59/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765473, "uuid": "0834705f-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.94.31.164:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765475, "uuid": "095ba318-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.132.251/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765477, "uuid": "0aca5867-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.236/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765477, "uuid": "0acf50bf-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://192.159.99.67/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765477, "uuid": "0ad1475a-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.31/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765480, "uuid": "0c3ca613-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.31.142:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765481, "uuid": "0d148ab2-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.173/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765481, "uuid": "0d15f985-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.52/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765481, "uuid": "0d3ad993-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://203.159.90.56/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765481, "uuid": "0d48989d-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.83.31.150/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765509, "uuid": "1dd6cb86-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.94.31.192/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771765828, "uuid": "dbe857da-0fef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.165.202:35467/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766000, "uuid": "42478e59-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.45.73.122/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766000, "uuid": "425c3308-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.242.34.8/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766001, "uuid": "433e7708-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.31.133.84:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766002, "uuid": "43ba4ce8-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.25.255.106:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766003, "uuid": "43fe65cc-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.29.200.51:9998/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766003, "uuid": "43ff9e9e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.127.251.197/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766003, "uuid": "4413948e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://99.53.69.161:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766003, "uuid": "4419463e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.229.1.27:90/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766003, "uuid": "44217023-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.17.225.98:99/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766003, "uuid": "44249a4b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.87.231.196:92/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766003, "uuid": "444ba853-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.200.240.134:8088/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766003, "uuid": "4463c145-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.200.67.119:8888/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766004, "uuid": "447c1f25-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.134.1.214:32/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766004, "uuid": "44c023bf-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.192.109.223:888/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766004, "uuid": "44e7e36f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.138.250.175/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766005, "uuid": "4516bc7d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.127.110.15/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766005, "uuid": "459dcbff-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.8.190.147:8000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "46a22c1b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.98.159.151:8088/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "46a60659-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.168.120.202/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "46ad4093-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.134.214.46/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "46ad92b3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://90.177.125.64:8888/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "46be7738-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.55.236.199:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "46c088f3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.15.129.41:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766007, "uuid": "46cbec72-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.54.141.236:8083/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766008, "uuid": "46e197c0-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.188.43.38:9999/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766008, "uuid": "46e796f2-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.88.84.96:8006/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766008, "uuid": "46ef8b26-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.89.74.157/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766008, "uuid": "46ef9e92-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://98.197.230.147:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766008, "uuid": "46f9ec6d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.6.96.248:8088/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766008, "uuid": "46fa1b2f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://161.49.132.132:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766008, "uuid": "470827b3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.6.131.170:84/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766008, "uuid": "471c477a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.86.50.18:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766008, "uuid": "47272e44-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.231.211.26:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766008, "uuid": "47545eef-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.154.246.166:8888/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766008, "uuid": "4759e25c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.87.61:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766009, "uuid": "47d87e37-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.147.3.138:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766010, "uuid": "4817a4a8-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://71.32.43.227:7000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766010, "uuid": "4861805f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.235.37.198:4000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766012, "uuid": "49a40cf2-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.32.152.177:82/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766013, "uuid": "4a473218-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.124.19.186/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766014, "uuid": "4ab37fb1-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.12.124.223:48763/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766016, "uuid": "4be8f339-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://71.32.43.229:7000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766020, "uuid": "4e7c1368-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.15.35.6:888/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766021, "uuid": "4e9b117a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.164.170.187:83/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766021, "uuid": "4ef13d9d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.187.163.7:82/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766021, "uuid": "4f070180-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.74.113.191:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766022, "uuid": "4f4b5bea-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.158.94.234:8000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766022, "uuid": "4f61aa46-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://73.179.119.149:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766022, "uuid": "4f645ccb-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.70.85.60/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766023, "uuid": "500957c3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.118.214.229/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766024, "uuid": "50eb0f17-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.189.191.216/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766025, "uuid": "5103db0a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.218.210.231/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766025, "uuid": "5134cf38-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.49.197.7:17156/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766025, "uuid": "51575138-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.246.34.66:8088/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766026, "uuid": "51acbf52-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://153.179.12.165:8081/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766026, "uuid": "51c202a3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.41.95.193/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766027, "uuid": "523bd3f4-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.32.152.182:82/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766027, "uuid": "52be4ce9-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.32.152.181:82/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766028, "uuid": "53403be5-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://71.32.43.224:7000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766028, "uuid": "53404256-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.208.104.221:8000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766029, "uuid": "5393555d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.109.142.91:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766029, "uuid": "53975289-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.6.157.142:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766029, "uuid": "53b72df4-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.141.78.138:89/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766029, "uuid": "53bc2366-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.133.5.186:8000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766029, "uuid": "53d233b1-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.51.102.25:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766029, "uuid": "53e7248c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.119.111.82:8082/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766030, "uuid": "53f95f59-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://174.71.238.196:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766030, "uuid": "547436bf-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.38.0.174:82/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766030, "uuid": "54757302-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.129.108.174:55555/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766030, "uuid": "5475750f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.67.52.56:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766031, "uuid": "5519beeb-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.140.167.192:8081/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766032, "uuid": "554ad71d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.248.15.32/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766032, "uuid": "555125ef-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.83.80.232:7001/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766032, "uuid": "5592552f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.123.98.220:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766032, "uuid": "55a4263a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://153.136.164.199:7000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766033, "uuid": "55c52f15-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.140.76.210:8000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766033, "uuid": "55c80ca7-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.176.195.217:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766034, "uuid": "569ea1b8-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.246.109.249:5000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766035, "uuid": "5747b3c3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.111.82.210:8089/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766035, "uuid": "5781c1c6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.167.179.75:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766037, "uuid": "581d5fc8-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.108.92.26:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766038, "uuid": "58c0d733-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.200.170.127:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766039, "uuid": "599a00d3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.32.152.180:82/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766039, "uuid": "59bbc8e2-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.32.244.184:82/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766042, "uuid": "5b64d5f0-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.57.46.28:50002/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766042, "uuid": "5b94fdca-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.91.165.202:2000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766045, "uuid": "5d054ffd-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.136.158.12:8088/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766046, "uuid": "5dc51a97-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.74.101.30:9026/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766046, "uuid": "5df64f94-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.6.210.123:1000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766046, "uuid": "5e0f2b20-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.121.3.167/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766046, "uuid": "5e11e9db-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.201.154.113:9000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "5eb795ce-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.191.223.51:8888/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "5ee09a57-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.115.114.38:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "5f1f6b0e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.158.94.236:8000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "5f3adf07-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.111.73.120:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766048, "uuid": "5f42d4c4-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.50.89.116:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766049, "uuid": "5f46efd6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.200.182.63:1024/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766049, "uuid": "5f5551ba-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.93.58.234:82/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766049, "uuid": "5f5e6dec-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.185.111.250:1028/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766049, "uuid": "5f6a81bf-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.113.182.186:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766049, "uuid": "5f6c4ed7-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.131.215.35/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766049, "uuid": "5f6e934e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.35.137.208/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766049, "uuid": "5f7d67e6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.253.167.204/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766049, "uuid": "5f869cfa-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.218.119.46:9999/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766049, "uuid": "5f9901e8-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.198.17.51/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766049, "uuid": "5fa0f602-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.200.40.71:8081/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766049, "uuid": "5fa46d97-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.114.109.153:8081/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766049, "uuid": "5fb55c6e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.88.47.125:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766050, "uuid": "5fdeebee-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.36.75.236/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766051, "uuid": "60ed7e78-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://90.90.205.29:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766051, "uuid": "60f8e78a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.168.101.52:34567/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766054, "uuid": "62a8491d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.151.226.42:7474/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766054, "uuid": "62c62a22-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.78.81.106:8081/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766055, "uuid": "62d92e16-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.194.113.184:83/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766055, "uuid": "63293022-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.121.182.194:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766055, "uuid": "6329b87d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.4.43.233:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766056, "uuid": "637b66e4-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.106.11.242:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766056, "uuid": "63b47b82-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.253.214.219:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766057, "uuid": "64300831-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.165.183.55:83/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766057, "uuid": "6453e845-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.116.80.179:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766057, "uuid": "646797f8-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.71.233.23:8000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766057, "uuid": "647df6fc-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.164.170.187:82/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "64af3dc7-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.192.189.174:8000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "64b241c8-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.173.188.10:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "64c5fe65-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.1.138.245:9191/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "64da235d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.245.76.121:8000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "64dd94b7-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.41.80.142:84/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "64ff7ca5-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.31.44.99:6080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "650eb19b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.238.146.33:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "65204c69-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.69.23.74:8000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "6524f9af-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.250.5.152:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766058, "uuid": "65274234-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.231.227.198:83/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766059, "uuid": "65438e8f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.35.14.93:10000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766066, "uuid": "69cd1b61-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.64.235.84/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766066, "uuid": "69d8551b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://128.106.116.114:8082/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766066, "uuid": "69ed3cbf-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.32.152.179:82/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766067, "uuid": "6a1b3d79-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.161.46.166:85/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766067, "uuid": "6a4adef7-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://50.193.152.206/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766067, "uuid": "6a553bab-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.41.227.158:8088/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766067, "uuid": "6a8f4587-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.158.108.211:8000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766069, "uuid": "6b32b8fc-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.242.158.254:8000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766069, "uuid": "6bbe81cb-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.200.94.3:89/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766069, "uuid": "6bc05e7c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://71.32.43.225:7000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766069, "uuid": "6bc65137-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.249.182.147:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766070, "uuid": "6bc8e984-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.176.8.13:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766070, "uuid": "6bc9d336-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.181.174.131:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766070, "uuid": "6be34c9f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.91.125.215:7100/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766070, "uuid": "6c000488-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.3.228.14:3000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766070, "uuid": "6c02cb9c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.214.255.79:888/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766070, "uuid": "6c469025-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.24.134.112/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766071, "uuid": "6cbab21c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://71.32.43.230:7000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766074, "uuid": "6e8d2b63-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.189.98.124:1028/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766076, "uuid": "6f928c84-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.246.126.185:6100/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766077, "uuid": "7078d91a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.176.254.54/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766078, "uuid": "70d3f3cf-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.180.236.68/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766079, "uuid": "71521a09-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.94.217.68:885/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766079, "uuid": "71687f9f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.32.152.176:82/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766080, "uuid": "72025412-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.200.65.158/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766081, "uuid": "72970420-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.94.170.68:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766081, "uuid": "729dcfe7-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.88.174.31:5000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766082, "uuid": "730c624f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.162.87.188:8000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766082, "uuid": "731c7884-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.125.100.151:8081/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766082, "uuid": "735be06e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.84.95.193:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766083, "uuid": "7388f763-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.116.53.206:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766084, "uuid": "74325232-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.243.234.56:2000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766084, "uuid": "7438924e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.44.199.50/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766084, "uuid": "74536437-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.150.114.245:82/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766084, "uuid": "74538faa-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.11.251.188/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766084, "uuid": "745a7cb2-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.180.21.59:82/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766084, "uuid": "7460d2a4-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.69.135.26:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766084, "uuid": "7474db78-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.146.67.244:100/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766084, "uuid": "74982681-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.14.155.226:7000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766084, "uuid": "74ac2fc9-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.160.19.159/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766084, "uuid": "74b31bf6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.38.121.138:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766085, "uuid": "74d7cdf3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.86.236.173:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766085, "uuid": "74f77296-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.73.207.206/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766085, "uuid": "750ede54-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.149.155.4:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766086, "uuid": "75b3605f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.246.61.212:34568/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766087, "uuid": "763dc72f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.178.159.167:8081/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766088, "uuid": "76d604fe-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.130.151.85:90/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766090, "uuid": "77f5cadc-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.163.155.78:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766092, "uuid": "79172d15-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.119.179.38/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766092, "uuid": "7979d3e0-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.85.116.157:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766093, "uuid": "79a33807-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://71.32.43.231:7000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766093, "uuid": "79c09db5-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.6.179.150:9999/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766094, "uuid": "7a74fbe6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.167.133.17/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766094, "uuid": "7a980de4-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.225.226.184:8000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766094, "uuid": "7aa6e166-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.54.141.236:8088/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766095, "uuid": "7b0d5976-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.175.181.210:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766096, "uuid": "7ba2b636-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.32.152.183:82/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766097, "uuid": "7bf4c88f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.236.54.89:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766097, "uuid": "7c56005e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.101.79.178:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766099, "uuid": "7d13512d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.76.140.199/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766100, "uuid": "7da9a376-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.171.119.16:87/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766102, "uuid": "7ee0061a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.43.24.71/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766105, "uuid": "8123ab80-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.217.9.108:2000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766107, "uuid": "8250a7dd-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.80.158.105/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766108, "uuid": "8295578f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.159.153.12:8081/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766108, "uuid": "829af24a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.16.211.4:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "83114121-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.222.224.91:8000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "8314ce73-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://71.32.43.226:7000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "8329d00d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.174.79.191:8000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "83386155-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.45.171.82:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "835a3815-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.238.21.198:37777/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "83601505-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.187.80.199:91/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "8361f99c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.210.69.70:8082/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "83638404-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.165.245.46:8000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "836af84b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.13.160.51:8083/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "83822aea-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.163.233.16:8081/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "838c47b8-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.68.158.92:83/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "838d3275-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.103.129.136:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766109, "uuid": "838d3335-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.120.58.100:8088/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766110, "uuid": "83af3a78-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://197.56.206.235:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766110, "uuid": "83c68e0c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.145.21.230:8088/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766110, "uuid": "83e62b5f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.178.236.110:9000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766110, "uuid": "84222318-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.12.121.146:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766112, "uuid": "850d5621-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.232.181.198:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766112, "uuid": "85256307-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.103.122.102:50956/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766114, "uuid": "8620beda-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.32.251.59:89/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766115, "uuid": "869c0a55-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.129.16.119/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766116, "uuid": "877bf537-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.19.38.94/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766117, "uuid": "87d92e39-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.200.158.179:2016/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766117, "uuid": "8802d6da-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.198.18.91:8000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766119, "uuid": "892311a9-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.38.207.182/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766120, "uuid": "89be8634-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.237.41.72:8085/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766120, "uuid": "89c22a84-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.36.156.140:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766121, "uuid": "8a82d87d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.94.48.82:89/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766121, "uuid": "8aa0425c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.139.95.202:2000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766122, "uuid": "8b2310db-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.35.149.73/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766123, "uuid": "8b86d2b4-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.178.159.87:8081/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766124, "uuid": "8c8744c8-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.172.43.114/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766124, "uuid": "8c894630-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://90.180.227.121:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766125, "uuid": "8c9610ab-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.70.150.26:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766125, "uuid": "8d18bff4-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.7.21.31:82/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766126, "uuid": "8da182c6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.152.141.10:82/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766127, "uuid": "8de5e9b6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.106.11.242:89/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766127, "uuid": "8e3458ff-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.196.16.186:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766129, "uuid": "8f10c089-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.32.230.206/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766129, "uuid": "8f572efd-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.228.33.227:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766129, "uuid": "8f717e35-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.34.146.54/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766130, "uuid": "8fd0d2cf-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.85.168.249:6022/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766130, "uuid": "8fd8d080-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.7.131.254:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766130, "uuid": "8fdc024d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.32.152.178:82/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766130, "uuid": "8ff58926-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.231.47.148:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766130, "uuid": "9020fb14-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://71.32.43.228:7000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766131, "uuid": "902aba29-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.60.107.150:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766131, "uuid": "90423838-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.137.218.197/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766131, "uuid": "904849c0-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.106.11.242:83/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766131, "uuid": "906789c7-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.138.104.129:4000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766131, "uuid": "90b3b961-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.35.243.212/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766132, "uuid": "910d7372-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.13.80.25:8082/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766133, "uuid": "91c6cf37-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://153.169.125.54:7000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766133, "uuid": "91cdc257-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.2.125.90/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766133, "uuid": "91d0b3bc-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.164.69.13:89/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766133, "uuid": "91d664ce-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.145.165.197/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766134, "uuid": "91edeaf6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.200.211.79:8888/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766135, "uuid": "92fd5fe0-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.163.157.37:9000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766136, "uuid": "93a287b8-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.155.135.65:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766137, "uuid": "93d2d2e7-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.49.149.140:8088/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766137, "uuid": "942ca722-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.116.40.66/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766138, "uuid": "9458e63b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.119.179.38:8120/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766138, "uuid": "9459affb-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.81.89.178:8888/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766182, "uuid": "af1ada42-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.9.27.155:2080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766183, "uuid": "af230262-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.31.161.242:8586/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766183, "uuid": "af250399-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.67.120.16:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766183, "uuid": "af276356-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.24.246.87/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766183, "uuid": "af62a3f3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.181.70.101:88/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766185, "uuid": "b0c622ac-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.27.204.65:8080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766185, "uuid": "b0ceb0c1-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.74.237.176:8000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766186, "uuid": "b1051ab3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.228.131.61:3001/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766186, "uuid": "b116eebe-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.162.173.125:1080/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766186, "uuid": "b121975f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://153.232.246.106:9004/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766186, "uuid": "b150e92e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.27.206.150:8000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766186, "uuid": "b1533750-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.228.144.133:3000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766187, "uuid": "b18c8534-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.103.233.246/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766187, "uuid": "b1bdf9fe-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.229.111.12:81/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766188, "uuid": "b258e294-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.153.83.218:9000/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766195, "uuid": "b697cf0a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.80.124.127/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766205, "uuid": "bc9c9ffe-0ff0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.34.7.133:1650/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766418, "uuid": "3b5faaed-0ff1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.27.85:57950/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766431, "uuid": "43218ef5-0ff1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.131.124:53121/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766540, "uuid": "8419b35c-0ff1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.90:49886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766779, "uuid": "12c6f65a-0ff2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.251:46230/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771766839, "uuid": "36a882fe-0ff2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.87:35785/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767318, "uuid": "5401dcc4-0ff3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.55.98.253:43513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767439, "uuid": "9c3f3bdc-0ff3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.19.174:36579/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767440, "uuid": "9c890f0d-0ff3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.107.239:55699/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771767682, "uuid": "2d2c10a3-0ff4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.107.239:55699/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768222, "uuid": "6e811299-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.234:34358/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768280, "uuid": "9148f05b-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.52/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768280, "uuid": "914db4b6-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.52/bins/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768280, "uuid": "914dcc3f-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.52/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768280, "uuid": "915e1284-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.52/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768280, "uuid": "91706bd9-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.55/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768280, "uuid": "91823004-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.55/bins/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768280, "uuid": "91823557-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.55/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768280, "uuid": "9183839a-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.55/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768280, "uuid": "9186b245-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.55/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768283, "uuid": "9358953e-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.52/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768283, "uuid": "935ded05-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.52/bins/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768283, "uuid": "936128b8-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.52/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768283, "uuid": "936391ba-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.55/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768283, "uuid": "9364b475-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.52/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768283, "uuid": "9364cdd8-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.52/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768283, "uuid": "9364dd8c-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.52/bins/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768283, "uuid": "936bbbfa-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.55/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768339, "uuid": "b47c3350-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.55/bins/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768353, "uuid": "bcb91c09-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.55/bins/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768402, "uuid": "d9c3a573-0ff5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.251:46230/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768588, "uuid": "48d0cd30-0ff6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.87:35785/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771768941, "uuid": "1b433a0e-0ff7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.234:34358/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771769535, "uuid": "7da4ac26-0ff8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.105.48.197:8585/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771769536, "uuid": "7df5152d-0ff8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.168.56.102:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771769543, "uuid": "82449ff0-0ff8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.8.16.9:1078/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771769546, "uuid": "840f71ba-0ff8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://86.150.68.134:82/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771769550, "uuid": "8622c1f9-0ff8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.236.84.25/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771769551, "uuid": "86c74a63-0ff8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.5.38.14:39126/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771769585, "uuid": "9b60151f-0ff8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://8.131.77.227:817/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771769599, "uuid": "a347fbba-0ff8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.94.40.59:65534/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771769948, "uuid": "7355b97f-0ff9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://joieshk7.hexalink.digital/?=check&&actmn=vrrNPRVDNZBWMwJL", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771769958, "uuid": "79632ef3-0ff9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.229.247:58759/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770139, "uuid": "e5329e40-0ff9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.191.207.223:54963/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770369, "uuid": "6e849121-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.154/389242390482/3atoNational.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770369, "uuid": "6e85b145-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.154/389242390482/3atoNational.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770369, "uuid": "6e8689ed-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.154/389242390482/3atoNational.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770369, "uuid": "6e869b62-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.154/389242390482/3atoNational.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770369, "uuid": "6e92ca4c-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.154/389242390482/3atoNational.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770369, "uuid": "6eae6414-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.154/389242390482/3atoNational.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770369, "uuid": "6ec2b0e9-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://10cricofficial.com/389242390482/3atoNational.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770369, "uuid": "6ec418e9-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.154/389242390482/3atoNational.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770370, "uuid": "6ef967c3-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.154/389242390482/3atoNational.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770371, "uuid": "6f658a44-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.154/389242390482/3atoNational.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770371, "uuid": "6fd3ee5e-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://10cricofficial.com/389242390482/3atoNational.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770372, "uuid": "701c09b1-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://justwatch.life/389242390482/3atoNational.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "70a36e77-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://justwatch.life/389242390482/3atoNational.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "70c8dfb2-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://justwatch.life/389242390482/3atoNational.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "70cb4e7f-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://justwatch.life/389242390482/3atoNational.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "70cfaa05-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://10cricofficial.com/389242390482/3atoNational.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "70d0ed5b-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://10cricofficial.com/389242390482/3atoNational.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "70d0fef7-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://justwatch.life/389242390482/3atoNational.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "70d10982-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://justwatch.life/389242390482/3atoNational.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "70d5f1d4-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://justwatch.life/389242390482/3atoNational.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "70d5f76d-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://10cricofficial.com/389242390482/3atoNational.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "70d9ca5e-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://justwatch.life/389242390482/3atoNational.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "70dfa30a-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://10cricofficial.com/389242390482/3atoNational.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "70e0342f-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://10cricofficial.com/389242390482/3atoNational.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "70e37e10-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.154/zatoempire.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "70eb179b-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://justwatch.life/zatoempire.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "70f49b96-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://10cricofficial.com/389242390482/3atoNational.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "70f4a08b-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://10cricofficial.com/zatoempire.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "710b57aa-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://10cricofficial.com/389242390482/3atoNational.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "710d3e29-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://justwatch.life/389242390482/3atoNational.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "71134dda-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://10cricofficial.com/389242390482/3atoNational.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770373, "uuid": "7117d5c7-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://justwatch.life/389242390482/3atoNational.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771770374, "uuid": "712acb8f-0ffa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://justwatch.life/389242390482/3atoNational.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771331, "uuid": "ac278837-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.154/389242390482/3atoNational.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771332, "uuid": "ac7a1422-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://10cricofficial.com/389242390482/3atoNational.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "acdaf4b1-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.154/389242390482/3atoNational.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "ad54d1f0-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/bins/parm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "ad5581eb-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/parm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "ad561768-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/parm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "ad5646a7-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/bins/parm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "ad5669f3-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/pmpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "ad58f72b-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "ad59f2b8-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/bins/parm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771333, "uuid": "ad5d6e56-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/bins/px86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "ad612d8a-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/pmips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "ad6bb9af-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/bins/pmips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "ad6be18b-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "ad6e9117-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "ad70eed7-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "ad712a9b-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/px86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "ad726321-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/bins/parm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "ad726d39-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "ad730c9c-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/bins/pmpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "ad7406e9-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/w.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "ad75dc2b-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/parm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "ad7e199f-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.151.195.33/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "ad982d40-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/parm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "ad9c10d3-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.151.195.33/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "ada0a803-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.151.195.33/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "ada1a20f-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.151.195.33/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "ada58f37-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.151.195.33/1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "adaaef19-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.151.195.33/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "adad1312-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.151.195.33/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "adafe82d-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.151.195.33/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "adb3ec7b-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "adb7961b-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.151.195.33/001010101010010110101011101010101101010111010101/debug", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "adb89f9a-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.151.195.33/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "adb8ba4b-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.151.195.33/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "adc0451d-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.151.195.33/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771334, "uuid": "adc7bb0d-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.151.195.33/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771336, "uuid": "aea8a333-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/c.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771336, "uuid": "aeaea81d-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771336, "uuid": "aeb312fd-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771336, "uuid": "aeb62b31-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.151.195.33/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771336, "uuid": "aec66841-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771336, "uuid": "aed7807b-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.151.195.33/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771336, "uuid": "aed78384-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.151.195.33/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771337, "uuid": "afa7b846-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.229.247:58759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771338, "uuid": "afc5a23e-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.214.82.110:40924/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771338, "uuid": "afcf57d3-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5297474040/UJbBQvA.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771338, "uuid": "b0059713-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.108.106:56372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771347, "uuid": "b5446fb1-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.182.24:58746/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771398, "uuid": "d3df886d-0ffc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.72.9:33625/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771578, "uuid": "3f2e69c6-0ffd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.203.126:41972/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771693, "uuid": "8378dbf2-0ffd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.182.24:58746/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771771746, "uuid": "a3250ecc-0ffd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.191.207.223:54963/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771772413, "uuid": "31022f6f-0fff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.108.106:56372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771772468, "uuid": "51e1260a-0fff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.72.9:33625/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771773014, "uuid": "97168482-1000-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.203.126:41972/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771773027, "uuid": "9ecbc883-1000-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.6.12:58646/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771773858, "uuid": "8ddfc1c9-1002-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.95.191:55980/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775165, "uuid": "994b6c89-1005-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8307178715/VGAvfwd.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775301, "uuid": "ea424858-1005-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.95.191:55980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "0685b264-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.182.187:36483/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "06ade679-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.103.101.235/bins/arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "06affa58-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.103.101.235/bins/x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "06b01abb-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.103.101.235/kla.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "06b0d143-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-bbbdebc2599c4d74b04c5d53e439f7a7.r2.dev/Approved%20Document%23402.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "06c5c9c9-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.103.101.235/bins/arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "06ca82f9-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.103.101.235/bins/mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "06cacab6-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.155.195.65:24474/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "06ef22ad-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://sutterpoint.com/Qbix01.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "06efbcee-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.88.34:44981/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "06f67821-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.119.89/ohshit.sh", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775349, "uuid": "06f7d939-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.103.101.235/bins/arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775350, "uuid": "07a57e65-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.16.104:56666/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775351, "uuid": "07c844f1-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://descamisad.sbs/auth/567/Windows/download.php", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775351, "uuid": "07e650df-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.161.176.25:3000/bins/boatnet.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775351, "uuid": "07e66827-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.161.176.25:3000/bins/boatnet.x86", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775351, "uuid": "07e899f4-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.161.176.25:3000/bins/boatnet.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775351, "uuid": "07ecc091-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.161.176.25:3000/bins/boatnet.x86-DEBUG", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775351, "uuid": "07ecfe12-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.161.176.25:3000/bins/boatnet.ppc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775351, "uuid": "07ed612e-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.161.176.25:3000/bins/boatnet.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775351, "uuid": "07efa08a-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.161.176.25:3000/bins/boatnet.mpsl", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775351, "uuid": "07f68f0c-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.161.176.25:3000/install.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775352, "uuid": "0865c5ba-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.161.176.25:3000/bins/boatnet.arm5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775352, "uuid": "08684694-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.161.176.25:3000/bins/boatnet.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775352, "uuid": "08686d7e-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.161.176.25:3000/bins/boatnet.mips", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775352, "uuid": "087000a9-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.161.176.25:3000/bins/boatnet.spc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775352, "uuid": "08818b76-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.161.176.25:3000/bins/boatnet.arm", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775352, "uuid": "088c6f9f-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.161.176.25:3000/bins/boatnet.x86_64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775353, "uuid": "0913ab35-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.88.34:44981/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775354, "uuid": "09ecbbe5-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://admin.sevfrtdxs.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&t=RADO-X-INC", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775354, "uuid": "0a06e533-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cn.unionlever.com/uploads/soft/111210/1_0048481261.rar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775354, "uuid": "0a0a512d-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-bbbdebc2599c4d74b04c5d53e439f7a7.r2.dev/Approved%20Document%23D53LU.msi", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775354, "uuid": "0a0dce56-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://mario-72b.pages.dev/apk/TVBox_q215613905_20220918-2031.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775355, "uuid": "0a371087-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.161.176.25:3000/bins/boatnet.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775359, "uuid": "0c8e20f1-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://xn--h6qpop2cq9nl9c.pages.dev/%E5%88%92%E5%AD%A6%E5%8F%B7V2--%E6%9E%81%E9%80%9F%E7%89%88.exe", "Tag": [ { "name": "PythonStealer", "colour": "#732E20", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775363, "uuid": "0f637e57-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-a6ff63da26bb4484928a6fe2f3fbab17.r2.dev/Concord%20Fax%20Viewer_2.0.0%20.scr", "Tag": [ { "name": "SimpleHelp", "colour": "#C609B5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775363, "uuid": "0f6c2120-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.227.211.41:8040/Bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775364, "uuid": "0fce2909-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://dbss180.com/%E8%B1%86%E5%8C%85%E7%81%AB%E9%BE%99.rar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775365, "uuid": "102e57c0-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://downali.game.uc.cn/s/6/6/20180724185728_PetK_UC_1.4.0.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775389, "uuid": "1eb7db30-1006-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://d3pk6xm84jcfh3.cloudfront.net/tgp/TASK769680691003_MarkEnd_/MOVIE_APP_1771740178796.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775788, "uuid": "0cb815a3-1007-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.89.45:52162/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775789, "uuid": "0d53e7db-1007-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.162.195.238:56417/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771775967, "uuid": "7735ca91-1007-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.6.12:58646/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "4b6a706d-1008-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.1.254:38244/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "4b77cc4e-1008-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/rq0anbhkd976/assets/js/pmapqb9hcs", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "4b7e0ab3-1008-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/rq0anbhkd976/assets/js/2xdctay0yb", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "4b85c5e5-1008-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/rq0anbhkd976/assets/js/eq55pytnsz", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "4b8ed4ea-1008-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/rq0anbhkd976/assets/js/ssozhasy24", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "4b952100-1008-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/rq0anbhkd976/assets/js/y2aplewk0h", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "4b9524eb-1008-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/rq0anbhkd976/assets/js/a071zmil6o", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "4b95ae87-1008-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/rq0anbhkd976/assets/js/8d4n4ly8d3", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776323, "uuid": "4b968e13-1008-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/rq0anbhkd976/assets/js/k9drx368ww", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776378, "uuid": "6c0b9162-1008-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/rq0anbhkd976/assets/js/20e0astr21", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776440, "uuid": "90f74df6-1008-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/rq0anbhkd976/assets/js/o5a0j5tug8", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776442, "uuid": "922f8e6c-1008-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.104.67:35508/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776444, "uuid": "93700bff-1008-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/rq0anbhkd976/assets/js/j6fhfiq96m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771776754, "uuid": "4c85ac31-1009-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.54.185:50424/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771777224, "uuid": "643c5045-100a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.46.159:36257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771777340, "uuid": "a9ceab69-100a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.245.13:40824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771777644, "uuid": "5e8b1d3a-100b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.119.89/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771777644, "uuid": "5e9e2885-100b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.119.89/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771777644, "uuid": "5eb9e7e2-100b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.119.89/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771777644, "uuid": "5ecd5a87-100b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.119.89/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771777644, "uuid": "5ef78bb8-100b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.119.89/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771777645, "uuid": "5f12f28e-100b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.119.89/hiddenbin/boatnet.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771777645, "uuid": "5f2da4ea-100b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.119.89/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771777645, "uuid": "5f40bbf1-100b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.119.89/hiddenbin/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771777645, "uuid": "5f54dc72-100b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.119.89/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771777645, "uuid": "5f719814-100b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.119.89/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771777645, "uuid": "5f962b9b-100b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.119.89/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771777646, "uuid": "5fd63f25-100b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.119.89/hiddenbin/boatnet.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771777656, "uuid": "661b42e1-100b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.119.89/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771777812, "uuid": "c2b52d68-100b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.248.148.165:81/hiddenbin/dvr1.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771777813, "uuid": "c359ead7-100b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.80.62:60967/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771777826, "uuid": "cb1c46c4-100b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.65.223:81/hiddenbin/dvr1.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771777826, "uuid": "cb353f5b-100b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.16.162.140:81/hiddenbin/dvr1.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771777882, "uuid": "ec83f86e-100b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.104.67:35508/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778421, "uuid": "2dbe8265-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/skid.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778423, "uuid": "2f2aa8da-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.159/bins/pppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778424, "uuid": "2f6f932a-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.66.228.200/linux_arm64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778424, "uuid": "2f78d78b-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.231.113.199/udpx86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778424, "uuid": "2f9fa88f-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.66.228.200/linux_amd64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778424, "uuid": "2fce8b77-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.224.79.221/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778424, "uuid": "2fdf2db8-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.207.40/linux_amd64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778426, "uuid": "30c2ea6b-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.23/bins/sora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778428, "uuid": "31bb4b34-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/skid.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778432, "uuid": "342ba699-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.23/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778433, "uuid": "34cfc384-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.224.79.221/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778433, "uuid": "34d06874-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.224.79.221/armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778433, "uuid": "34e81914-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.66.228.200/linux_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778433, "uuid": "34ed759c-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.207.40/linux_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778433, "uuid": "34fd66bb-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.32/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778433, "uuid": "350d2953-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.32/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778471, "uuid": "4b8281d2-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.245.13:40824/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778536, "uuid": "7257131a-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.224.79.221/run.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778536, "uuid": "729c52b1-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.159/kla.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778593, "uuid": "94693c4c-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.159/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778595, "uuid": "955ff748-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.159/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778595, "uuid": "955ff9af-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.159/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778599, "uuid": "983912de-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.159/bins/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778599, "uuid": "98391a5e-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.159/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778599, "uuid": "9839240e-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.159/bins/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778600, "uuid": "985e316e-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.159/bins/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778600, "uuid": "985e34e6-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.159/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778600, "uuid": "985edf74-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.159/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778600, "uuid": "985f6ccb-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.159/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778601, "uuid": "996d8aa4-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.210.56:58107/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778607, "uuid": "9c817470-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://down.1756520.xyz/client", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778655, "uuid": "b966f44f-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.224.79.221/client", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778659, "uuid": "bb8574c2-100d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://down.1756520.xyz/run.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778844, "uuid": "2a0457d0-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://down.1756520.xyz/run.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778844, "uuid": "2a2cf4bc-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://down.1756520.xyz/armv7l", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778844, "uuid": "2a2d11a6-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://down.1756520.xyz/x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778845, "uuid": "2ac47978-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://down.1756520.xyz/client", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771778896, "uuid": "493195fb-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://down.1756520.xyz/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779024, "uuid": "9578c169-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.23/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779024, "uuid": "9579e2ea-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.23/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779024, "uuid": "957fd9b2-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.23/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779024, "uuid": "95874379-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.23/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779025, "uuid": "95945078-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.23/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779025, "uuid": "959c851e-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.23/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779025, "uuid": "95a3a3a8-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.217/bins/px64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779025, "uuid": "95aea8d4-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.23/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779025, "uuid": "95aedadd-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.23/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779025, "uuid": "95af0196-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.23/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779077, "uuid": "b5155ad9-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.201/bins/purves.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779077, "uuid": "b5213110-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.201/bins/purves.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "b755be14-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.201/bins/purves.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "b755dce8-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.201/bins/purves.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "b756cc17-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.201/bins/purves.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "b756e92c-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.201/bins/purves.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "b759de8f-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.201/bins/purves.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "b75d7483-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.201/bins/purves.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779081, "uuid": "b760ddab-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.201/bins/purves.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779082, "uuid": "b78f7b06-100e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.201/bins/purves.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771779490, "uuid": "ab140976-100f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.200.7:51440/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771780282, "uuid": "83118c4b-1011-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.211.8.231:40096/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771780517, "uuid": "0f4ce9c4-1012-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.210.56:58107/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771780940, "uuid": "0b49108b-1013-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.85.182:53470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771780998, "uuid": "2defc929-1013-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.184.241:59629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771781238, "uuid": "bd0afbce-1013-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.211.8.231:40096/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771781715, "uuid": "d942f8de-1014-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.189.29.68:53231/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771781949, "uuid": "64968feb-1015-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.91.168:33667/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771782132, "uuid": "d183ecc6-1015-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.91.168:33667/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771782923, "uuid": "a98b02b7-1017-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.59.106.193:49567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771782972, "uuid": "c64abcdc-1017-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.59.106.193:49567/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771783519, "uuid": "0c5c756b-1019-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.224.7:55681/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771783927, "uuid": "ff7444c9-1019-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5926060486/p4oPI3H.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771784110, "uuid": "6cdadea7-101a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.127.30:51308/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771784465, "uuid": "402ea274-101b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8301592964/g4V0mC6.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771784607, "uuid": "951795ad-101b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.93.220:39244/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771784772, "uuid": "f793c77c-101b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.184.241:59629/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771785130, "uuid": "cc817b31-101c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.228.213:42569/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771785796, "uuid": "5979fbf4-101e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.127.30:51308/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771785974, "uuid": "c3d6416c-101e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.33.187:44051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771786752, "uuid": "936edd07-1020-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.54.185:50424/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771788922, "uuid": "a1116368-1025-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.227.202:45414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771789042, "uuid": "e88d1fd5-1025-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.146.92.46:48175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771789523, "uuid": "0746cc0f-1027-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.146.32:47223/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790003, "uuid": "25185cfb-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/all.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790174, "uuid": "8b28d90f-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/titanjr.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790174, "uuid": "8b28e298-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/titanjr.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790174, "uuid": "8b2ea48a-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/titanjr.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790174, "uuid": "8b67fe78-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189/.5r3fqt67ew531has4231.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790175, "uuid": "8c03ca9e-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.231.113.209/c/kt12", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790179, "uuid": "8e584edf-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/titanjr.mipsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790179, "uuid": "8e58f2f6-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/titanjr.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790180, "uuid": "8e8b2587-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/titanjr.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790181, "uuid": "8f4d912a-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/titanjr.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790181, "uuid": "8f4da1b1-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/titanjr.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790181, "uuid": "8f4f3e71-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/titanjr.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790181, "uuid": "8f4f4962-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/titanjr.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790181, "uuid": "8f5d9d9c-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.231.113.209/c/kt10", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790185, "uuid": "9173440d-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/titanjr.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790185, "uuid": "917344a8-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/titanjr.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790185, "uuid": "917b87eb-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/titanjr.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790185, "uuid": "918de480-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/titanjr.ppc440", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790185, "uuid": "919aac81-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/titanjr.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790185, "uuid": "91a7103a-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/titanjr.x86_32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790185, "uuid": "91ffe951-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.231.113.209/c/kt8", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790234, "uuid": "af0cefe0-1028-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189/.5r3fqt67ew531has4231.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771790421, "uuid": "1e2db1fe-1029-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.146.92.46:48175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771792591, "uuid": "2bfcb520-102e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.146.32:47223/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771793233, "uuid": "aac2e8b4-102f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.201.88:47177/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771793716, "uuid": "ca93c701-1030-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.69.76:37484/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771794247, "uuid": "06ee64f2-1032-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.55/bins/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771794248, "uuid": "079dde89-1032-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.55/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771794260, "uuid": "0eb475c2-1032-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771794260, "uuid": "0ec330ac-1032-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771794260, "uuid": "0ee7d1ca-1032-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771794261, "uuid": "0efee205-1032-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771794261, "uuid": "0f0bdba7-1032-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771794261, "uuid": "0f31b295-1032-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771794261, "uuid": "0f43bc20-1032-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771794261, "uuid": "0f7808a7-1032-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771794261, "uuid": "0f842a23-1032-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771794262, "uuid": "0f9600e9-1032-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.132.53.180/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771794306, "uuid": "2a573ec9-1032-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.201.88:47177/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771794916, "uuid": "95e1e4e7-1033-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.74.239:57051/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771795157, "uuid": "256f7ceb-1034-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.247.127:59400/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771795278, "uuid": "6d47f90a-1034-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.201.12:49048/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771795519, "uuid": "fd0a5f75-1034-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.229.188:53311/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771795996, "uuid": "19218843-1036-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.74.239:57051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771796888, "uuid": "2d2c6a01-1038-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.229.188:53311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771797017, "uuid": "79e754e5-1038-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.84:50703/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771797074, "uuid": "9b9ffb6c-1038-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.224.225:39865/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771797190, "uuid": "e0d5916f-1038-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.131.251:50154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771797319, "uuid": "2db464d7-1039-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.224.225:39865/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771797737, "uuid": "27504fe9-103a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.110.142:57219/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771798162, "uuid": "24866abd-103b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.84:50703/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771798163, "uuid": "24fed3f0-103b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.68.99:52798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771798214, "uuid": "43255ce5-103b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.110.142:57219/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771798577, "uuid": "1b7870b2-103c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.1.28:42879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771798694, "uuid": "6153b170-103c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.26.253.224:2222/bin.x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771799837, "uuid": "0a99917b-103f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.68.99:52798/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771800067, "uuid": "942a3a83-103f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.78.62:47559/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771800068, "uuid": "949ebdf6-103f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.203.86:35447/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771800070, "uuid": "95b184da-103f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.69.76:37484/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771800548, "uuid": "b2aaa0a1-1040-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/1103068177/oKX5AB4.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771800622, "uuid": "de7915fd-1040-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.198.40:37104/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771801757, "uuid": "833c9397-1043-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.209.140:43779/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771801992, "uuid": "0f630ef2-1044-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.180.24:44630/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771802238, "uuid": "a1f27eff-1044-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://banappeals.net/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771803618, "uuid": "d8828a33-1047-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.180.24:44630/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771803798, "uuid": "43f86b93-1048-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.168.50.192:38797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771804570, "uuid": "0fd1cd93-104a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.75.96:35217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771747027, "uuid": "1551e16b-0fc4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "0uwsxbye.forward3cross.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771760465, "uuid": "5f5b5c25-0fe3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.162.238.194", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "738e95e4-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.172.43.114", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771760465, "uuid": "5f5b9076-0fe3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.33.237.219", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766085, "uuid": "74fd829f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.34.146.54", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769583, "uuid": "99ece229-0ff8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.94.40.59", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769525, "uuid": "776bd031-0ff8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.168.56.102", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766008, "uuid": "475d7464-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.123.98.220", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766033, "uuid": "560f0de8-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.151.226.42", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766110, "uuid": "84159623-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.152.141.10", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "394374e6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.31.133.84", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766068, "uuid": "6ad35481-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.6.179.150", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "5f82b5e2-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.78.81.106", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766042, "uuid": "5b9b28bc-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "104.4.43.233", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771749906, "uuid": "c98af559-0fca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.172.13.174", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766029, "uuid": "53d82a36-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "108.41.80.142", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766057, "uuid": "648fbec1-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "108.69.135.26", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766031, "uuid": "54b31731-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.116.80.179", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766008, "uuid": "472999c0-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.129.108.174", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766070, "uuid": "6bee1340-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.167.133.17", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "3933064f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.192.109.223", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770364, "uuid": "6bc219ba-0ffa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "10cricofficial.com" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771722306, "uuid": "86827ba8-0f8a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.88.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775764, "uuid": "fe0a02d9-1006-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.89.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771740185, "uuid": "2736904e-0fb4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.93.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771747685, "uuid": "9dac074d-0fc5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.111.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771736524, "uuid": "a15d3388-0fab-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.2.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766764, "uuid": "0987ec36-0ff2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.3.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764725, "uuid": "4a943ed4-0fed-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.31.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771753805, "uuid": "dd9635eb-0fd3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.61.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775344, "uuid": "04030e0b-1006-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.88.34", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771723506, "uuid": "51cb274a-0f8d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.196.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771726744, "uuid": "dc1a54e6-0f94-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.14.169.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766030, "uuid": "53f54696-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.250.5.152", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771757944, "uuid": "80cded82-0fdd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.109.219.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766008, "uuid": "46fac4c9-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.119.111.82", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "73ce21f5-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.120.58.100", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750505, "uuid": "2e7f02e1-0fcc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.237.0.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771728005, "uuid": "cbb98bd5-0f97-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.240.73.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776724, "uuid": "3a2cd3ce-1009-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.242.54.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766067, "uuid": "6a939657-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.178.159.167", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766099, "uuid": "7d424b46-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.178.159.87", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770124, "uuid": "dc4a5438-0ff9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.191.207.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766084, "uuid": "748e59eb-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.32.230.206", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766070, "uuid": "6bec65fb-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.32.251.59", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766165, "uuid": "a48ad0e6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.34.7.133", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766025, "uuid": "5152aa79-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.35.137.208", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766088, "uuid": "76fd6ea3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.35.243.212", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766071, "uuid": "6c6169aa-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.38.207.182", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766010, "uuid": "48401422-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.41.95.193", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771746486, "uuid": "d2e453bf-0fc2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.5.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771384, "uuid": "cbb624ba-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.72.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771804564, "uuid": "0c235a74-104a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.75.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771743124, "uuid": "ff6fc20e-0fba-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.24.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771723807, "uuid": "05386506-0f8e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.68.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771797004, "uuid": "72102ef1-1038-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.224.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771795144, "uuid": "1d96ff81-1034-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.247.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771797724, "uuid": "1f6961c7-103a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.110.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771737064, "uuid": "e371be7d-0fac-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.202.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766003, "uuid": "4436756f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.74.113.191", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766165, "uuid": "a48d3df6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.103.233.246", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769525, "uuid": "776c22d0-0ff8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.105.48.197", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771756925, "uuid": "214e58fc-0fdb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.108.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771743425, "uuid": "b265f711-0fbb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.83.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766085, "uuid": "74ca8c75-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.68.158.92", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "392f17fc-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.86.50.18", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "39287051-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.89.74.157", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "5fd3a698-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.91.125.215", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766110, "uuid": "83ac2ead-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.2.125.90", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771721944, "uuid": "af1475dc-0f89-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.203.49.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771773004, "uuid": "9138be3a-1000-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.6.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771738805, "uuid": "f0f163dc-0fb0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.81.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771726864, "uuid": "2345bcf2-0f95-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.90.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771756625, "uuid": "6e70483a-0fda-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.29.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771784584, "uuid": "87691395-101b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.93.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766028, "uuid": "52de7ffb-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.136.158.12", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766008, "uuid": "47547852-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.140.76.210", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766052, "uuid": "6117ed2d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.189.98.124", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766095, "uuid": "7ab2bcc5-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.200.158.179", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "394be157-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.200.240.134", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766022, "uuid": "4f7efc2f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.200.40.71", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "5f19bc86-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.200.65.158", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "395efa45-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.200.67.119", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771781943, "uuid": "613b6345-1015-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.91.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771748044, "uuid": "73d0b9d4-0fc6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.36.244", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "6b695228-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.73.207.206", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "5f781afb-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.1.138.245", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766070, "uuid": "6c2b6379-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.101.79.178", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766021, "uuid": "4f11561c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.6.210.123", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "39298b13-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.6.96.248", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766110, "uuid": "83b5d945-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.116.40.66", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771744325, "uuid": "cb30f1f3-0fbd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.10.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771753384, "uuid": "e29a49c4-0fd2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.140.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771749364, "uuid": "86c0c3ea-0fc9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.132.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771780985, "uuid": "25e44207-1013-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.184.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "5fb78afd-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.176.8.13", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766405, "uuid": "33b63f97-0ff1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.131.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771800063, "uuid": "91895650-103f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.203.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766037, "uuid": "5847b43b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.253.214.219", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771801984, "uuid": "0ac62f4d-1044-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.180.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771798564, "uuid": "13e6847a-103c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.1.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "5f6e3ce1-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.121.182.194", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766021, "uuid": "4f22d5af-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.121.3.167", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "440565c2-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.103", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43ff63e2-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.107", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765398, "uuid": "db4dc9f3-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.123", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "49857518-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.140", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "4964352e-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.144", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "4ee532af-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.149", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765325, "uuid": "b00bb4c4-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.151", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "498c2700-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.173", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f573d3-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.179", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "4ed7558d-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.188", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "4ed013ea-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.213", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "49ae6031-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.242", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765154, "uuid": "49d75d91-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.248", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "4403a63d-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.31", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f1e19e-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.40", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764365, "uuid": "73a8624d-0fec-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.50", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "4995629e-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.52", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "440d38ef-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.54", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f6277d-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.82", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f6aa18-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.88", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "440d9255-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.132.185", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "4ee5961b-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.132.186", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f3eb99-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.132.197", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765424, "uuid": "eb424398-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.132.211", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765400, "uuid": "dcb83bdf-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.132.212", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765423, "uuid": "eaa23a27-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.132.238", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765433, "uuid": "f093ec48-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.132.251", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f3ce59-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.132.54", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766090, "uuid": "781ca2ef-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.36.156.140", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766056, "uuid": "63bfc386-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.162.87.188", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766110, "uuid": "83a44e4a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.163.157.37", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766095, "uuid": "7ac0321e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.198.18.91", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771780263, "uuid": "77cb696c-1011-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.211.8.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766165, "uuid": "a48be1bc-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.27.206.150", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771795505, "uuid": "f4a48a95-1034-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.229.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771785963, "uuid": "bd51fa2b-101e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.33.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771800606, "uuid": "d4e0bc3e-1040-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.198.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766047, "uuid": "5e803c10-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "128.106.116.114", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771324, "uuid": "a7e1e8c9-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "130.12.180.161", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759205, "uuid": "7056b8fe-0fe0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "130.12.182.211", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750085, "uuid": "34669ba6-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.59.101.21", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775344, "uuid": "040b70ed-1006-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.59.119.89", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766039, "uuid": "59dc9fc7-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.161.46.166", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "393dce44-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.187.163.7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769525, "uuid": "776c073e-0ff8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.236.84.25", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750085, "uuid": "3466fae9-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "140.233.190.82", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "392767a6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "141.134.214.46", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766032, "uuid": "55b74ccd-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "142.113.182.186", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778406, "uuid": "24fe851b-100d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.31.207.40", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766085, "uuid": "75195927-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "149.210.69.70", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "5f6361ea-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.192.189.174", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "393d364b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.45.73.122", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766165, "uuid": "a48b571f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.74.237.176", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752245, "uuid": "3be4c4ca-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "152.42.212.97", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766008, "uuid": "4730be42-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "153.136.164.199", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766110, "uuid": "83b26e83-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "153.169.125.54", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766003, "uuid": "44665e2c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "153.179.12.165", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766165, "uuid": "a48cfbf1-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "153.232.246.106", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778406, "uuid": "24fef1fa-100d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "156.224.79.221", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750085, "uuid": "3467134b-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "156.229.163.77", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778406, "uuid": "25005adb-100d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "156.231.113.199", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771790164, "uuid": "850d9e38-1028-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "156.231.113.209", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771777806, "uuid": "bf18dac0-100b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "156.248.148.165", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766008, "uuid": "472813e0-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.140.167.192", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766107, "uuid": "824aa77c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "159.196.16.186", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752245, "uuid": "3be30a44-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "159.65.3.72", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "393dc3d3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "161.29.200.51", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "39304cff-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "161.49.132.132", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771723745, "uuid": "e021a16a-0f8d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "165.220.188.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766003, "uuid": "4426e9ea-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "168.70.85.60", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752245, "uuid": "3be3c1b1-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "170.239.87.229", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766068, "uuid": "6ae876aa-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.225.226.184", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766102, "uuid": "7f403daf-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.231.47.148", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766047, "uuid": "5e1a8478-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.249.182.147", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "392c5016-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.6.131.170", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766005, "uuid": "454415c6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.6.157.142", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766110, "uuid": "83a05ea3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.7.131.254", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "83676be1-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.7.21.31", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766008, "uuid": "46ee7088-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "174.71.238.196", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "5f73a525-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.106.11.242", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766006, "uuid": "4607f9dd-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.141.78.138", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766110, "uuid": "83b2b354-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.145.165.197", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766033, "uuid": "55c54640-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.111.73.120", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766092, "uuid": "79427f36-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.12.121.146", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "43972020-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.12.124.223", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766093, "uuid": "79bfa917-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.222.224.91", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766094, "uuid": "7a968bae-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.35.149.73", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752245, "uuid": "3be3d06a-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.26", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778406, "uuid": "24ff9bca-100d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768263, "uuid": "87785702-0ff5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.148.52", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766056, "uuid": "63bf49d0-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.94.217.68", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775344, "uuid": "04027c7e-1006-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "177.161.176.25", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766165, "uuid": "a48b676e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "177.229.111.12", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766003, "uuid": "44530a17-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.118.214.229", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766084, "uuid": "747ee181-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "179.217.9.108", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "64dc0fbf-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.14.155.226", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766008, "uuid": "474a3323-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.176.195.217", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "39278525-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.235.37.198", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "5fc2e289-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.242.158.254", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766031, "uuid": "54cc36a5-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.35.14.93", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766021, "uuid": "4ebe9a50-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.57.46.28", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766059, "uuid": "653b8608-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.94.170.68", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771795264, "uuid": "65111f0c-1034-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.201.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769945, "uuid": "718fb2ef-0ff9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.229.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771798144, "uuid": "196588fc-103b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.68.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771759684, "uuid": "8dd6203b-0fe1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.247.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771776425, "uuid": "8817e921-1008-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.104.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771718765, "uuid": "4803ea12-0f82-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.162.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "393a473d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.54.141.236", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766025, "uuid": "5126e0dc-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.93.58.234", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766165, "uuid": "a48a8b96-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.80.124.127", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775344, "uuid": "040815eb-1006-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.103.101.235", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771738505, "uuid": "3e15064c-0fb0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.132.53.180", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766097, "uuid": "7c1cbc1f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.237.41.72", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765154, "uuid": "49da9056-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.241.208.122", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "495b64ed-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.241.208.151", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "49abe264-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.241.208.173", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f40e16-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.241.211.118", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765155, "uuid": "4a7f28b5-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.241.211.6", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764424, "uuid": "96e48176-0fec-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.241.211.61", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "49860bff-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.241.211.64", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "839d22bf-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.60.107.150", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766029, "uuid": "53e351eb-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.71.233.23", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771730705, "uuid": "14f35f85-0f9e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "186.193.107.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766028, "uuid": "52fa135a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "187.91.165.202", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "3928647d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.138.250.175", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "3928ca21-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.15.129.41", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766014, "uuid": "4a6dd2db-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.167.179.75", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766036, "uuid": "57a91b4e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.36.75.236", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766165, "uuid": "a48a48db-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.9.27.155", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766165, "uuid": "a48d4ddc-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.162.173.125", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766070, "uuid": "6be56b01-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.163.155.78", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766032, "uuid": "556f1278-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.191.223.51", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766070, "uuid": "6c06b49b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.236.54.89", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766023, "uuid": "5044c03d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.115.114.38", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766030, "uuid": "54662ff0-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.173.188.10", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766021, "uuid": "4ebfd645-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.201.154.113", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766008, "uuid": "47209fe4-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.218.210.231", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "393c1066-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.231.211.26", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765406, "uuid": "e055e8ce-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.159.99.108", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f0663d-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.159.99.111", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765154, "uuid": "4a197ca2-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.159.99.119", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765325, "uuid": "b00b68fa-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.159.99.123", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f101eb-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.159.99.131", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765360, "uuid": "c5011ac0-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.159.99.152", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764365, "uuid": "73a8f6e4-0fec-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.159.99.175", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765145, "uuid": "44c2a065-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.159.99.178", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765425, "uuid": "eb60aa83-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.159.99.206", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f35a14-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.159.99.219", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f1db9e-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.159.99.34", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765344, "uuid": "bba232d7-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.159.99.55", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765325, "uuid": "b025ac57-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.159.99.61", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "4eca7c0d-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.159.99.67", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "49912dd1-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.159.99.98", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775344, "uuid": "04114204-1006-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.227.211.41", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766032, "uuid": "5543ae59-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.114.109.153", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766085, "uuid": "74d38aa7-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.165.245.46", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765145, "uuid": "44b61440-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.26.115.126", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f36896-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.26.115.135", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "4ef3b35e-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.26.115.147", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "497ad09f-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.26.115.163", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "49b37e87-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.26.115.192", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765406, "uuid": "e025855e-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.26.115.200", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f07974-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.26.115.225", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765154, "uuid": "4a0d35fa-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.26.115.226", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764424, "uuid": "96e38b7b-0fec-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.26.115.25", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765154, "uuid": "49cfcb86-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.26.115.26", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765335, "uuid": "b5c228f4-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.26.115.35", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764365, "uuid": "73a8e9c8-0fec-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.26.115.51", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764365, "uuid": "73a8635e-0fec-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.26.115.55", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765389, "uuid": "d63427c8-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.26.115.65", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f2bb3e-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.26.115.94", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765145, "uuid": "44cbb80f-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.26.115.99", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f2ec0b-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "194.26.192.109", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "5fcbb961-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.158.108.211", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771798684, "uuid": "5ba7b2d5-103c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.26.253.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771777806, "uuid": "bf1840a7-100b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.190.65.223", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766047, "uuid": "5e91745a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.64.235.84", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766085, "uuid": "752dc875-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "197.56.206.235", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766031, "uuid": "54cc66cb-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.238.146.33", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f79907-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.58.56.134", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765433, "uuid": "f08dc8fb-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.58.56.228", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765325, "uuid": "b0253324-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.58.56.235", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "497918b1-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.58.56.236", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765155, "uuid": "4a6fd747-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.58.56.46", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "49affe98-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.58.56.71", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766057, "uuid": "644efed5-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.84.95.193", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766074, "uuid": "6eba3b9d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.85.116.157", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766035, "uuid": "577ca80d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "200.88.47.125", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "3929203b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "200.88.84.96", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766070, "uuid": "6be61219-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.119.179.38", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766003, "uuid": "44662a03-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.124.19.186", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766096, "uuid": "7bcb0818-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.159.153.12", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "739e8107-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.178.236.110", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "64f3c56e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.125.100.151", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766082, "uuid": "7386fc49-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.129.16.119", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766008, "uuid": "46ebda38-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.133.5.186", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766006, "uuid": "45eab3a1-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.158.94.234", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766022, "uuid": "4f80dd45-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.158.94.236", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766069, "uuid": "6b33f11d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.160.19.159", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766070, "uuid": "6bed149e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.175.181.210", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766030, "uuid": "5418d8bc-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.131.215.35", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765436, "uuid": "f20ccbe4-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.159.90.56", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766025, "uuid": "511c40eb-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.198.17.51", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771753024, "uuid": "0c4e5550-0fd2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.214.82.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766022, "uuid": "4f6e2ef7-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.218.119.46", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766059, "uuid": "6564f41f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.38.121.138", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766057, "uuid": "64999808-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "208.180.21.59", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766071, "uuid": "6cdae43e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "210.149.155.4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766029, "uuid": "536d8c1b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "211.74.101.30", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775344, "uuid": "04035ad8-1006-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "213.155.195.65", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "5f727145-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "213.165.183.55", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766086, "uuid": "75d5b8dc-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.103.122.102", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766084, "uuid": "7472256a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.103.129.136", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "3928b407-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.188.43.38", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771782906, "uuid": "9f07f3f3-1017-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.59.106.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778585, "uuid": "8f68e167-100d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.210.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775344, "uuid": "040836ca-1006-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.16.104", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771731244, "uuid": "5648726b-0f9f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.177.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766084, "uuid": "7499db5b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.76.140.199", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "393f176d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.134.1.214", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771731065, "uuid": "eb5620ef-0f9e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.202.89.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766066, "uuid": "69f2356b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.246.126.185", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766009, "uuid": "47fcad93-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.246.34.66", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766059, "uuid": "65444234-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.246.61.212", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771777324, "uuid": "a023bdc9-100a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.1.245.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "39452da6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.127.251.197", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771741625, "uuid": "8190c9bc-0fb7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.13.251.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771755785, "uuid": "7a06495b-0fd8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.100.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771762925, "uuid": "197c332c-0fe9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.203.95.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771742824, "uuid": "4c8b384d-0fba-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.3.43.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771785125, "uuid": "c9789d93-101c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.228.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771746005, "uuid": "b46c1f65-0fc1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.176.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771783504, "uuid": "0360889c-1019-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.224.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771731005, "uuid": "c7e703d5-0f9e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.107.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771334, "uuid": "ad88592d-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.182.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771784104, "uuid": "691492b5-101a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.127.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771763525, "uuid": "7edc8635-0fea-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.39.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752125, "uuid": "f46eaca2-0fcf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.248.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "3931ee4c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.154.246.166", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766165, "uuid": "a48cea05-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.228.144.133", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "393c52cf-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.17.225.98", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766079, "uuid": "71864f4b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "23.16.211.4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766006, "uuid": "46398b11-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.109.142.91", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766016, "uuid": "4c13e707-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.32.244.184", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771747144, "uuid": "5b90ba1e-0fc4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.113.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "3928f68e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.55.236.199", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752245, "uuid": "3be58ed0-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.59.129.233", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "5fa91a7e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.3.228.14", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "3928ebf4-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.87.61", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766112, "uuid": "854ca84e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.81.89.178", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771756325, "uuid": "bb532f83-0fd9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "366kf0hf.up12file.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771746425, "uuid": "af01db26-0fc2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.59.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771797183, "uuid": "dceab07f-1038-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.88.131.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766110, "uuid": "83d523a9-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.228.33.227", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766056, "uuid": "63a9e73e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.32.152.176", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "3927f4b8-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.32.152.177", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "830f78e9-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.32.152.178", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766047, "uuid": "5e8809e6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.32.152.179", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766009, "uuid": "477926e1-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.32.152.180", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766008, "uuid": "476972de-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.32.152.181", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766008, "uuid": "46e7fb4a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.32.152.182", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766070, "uuid": "6c2bf055-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.32.152.183", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766014, "uuid": "4ad6af5e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.38.0.174", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766047, "uuid": "5e9313be-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.116.53.206", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765807, "uuid": "cf34888f-0fef-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.165.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "434dc43f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.200.170.127", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766029, "uuid": "536f440f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.200.182.63", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766110, "uuid": "83e7f88b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.200.211.79", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771733706, "uuid": "11911f96-0fa5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.192.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771758964, "uuid": "e078e08a-0fdf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.39.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771755064, "uuid": "cbf75483-0fd6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.36.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771746724, "uuid": "60e353b0-0fc3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.222.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771773845, "uuid": "86507e65-1002-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.95.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771751045, "uuid": "702f4052-0fcd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.19.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771324, "uuid": "a7fb2f53-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.108.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750324, "uuid": "c2d9b555-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.170.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771748406, "uuid": "4b8e087d-0fc7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.189.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771761005, "uuid": "a11c9537-0fe4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.232.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771788903, "uuid": "95c596ae-1025-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.227.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752245, "uuid": "3be3b30b-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.128.118.140", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765325, "uuid": "b020e8ae-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.141.215.10", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f139ca-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.141.215.124", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765325, "uuid": "b00cd028-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.141.215.15", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765388, "uuid": "d5a269ad-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.141.215.47", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f783e6-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.141.215.7", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752245, "uuid": "3be38c52-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.148.103.189", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764424, "uuid": "96e3577d-0fec-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.154.98.164", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "440da7e0-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.154.98.212", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765154, "uuid": "49d51523-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.154.98.223", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f87455-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.154.98.229", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765156, "uuid": "4b0208f3-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.154.98.32", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778406, "uuid": "24fe9fbc-100d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.66.228.200", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765385, "uuid": "d3897ea5-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.80.158.86", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765325, "uuid": "b0199caf-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.80.158.96", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f06cbf-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.83.31.104", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765384, "uuid": "d34ec278-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.83.31.110", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765154, "uuid": "49e5f89b-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.83.31.116", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765382, "uuid": "d2162805-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.83.31.128", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765154, "uuid": "49d573f6-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.83.31.132", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f386f7-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.83.31.142", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765434, "uuid": "f0e57742-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.83.31.150", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765325, "uuid": "b0247aa8-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.83.31.198", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "44048806-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.83.31.211", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f0769c-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.83.31.230", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f0ccb8-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.83.31.24", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "49670bbe-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.83.31.248", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764424, "uuid": "96e4ab58-0fec-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.83.31.75", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765325, "uuid": "b016ead1-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.83.31.82", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770364, "uuid": "6bac0add-0ffa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.87.43.154", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "498ada61-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.115", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "4ee85cfc-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.124", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765154, "uuid": "49d51aeb-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.149", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765325, "uuid": "b00cd340-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.184", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765406, "uuid": "e02ea2c5-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.195", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f1af04-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.205", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "4405652c-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.216", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "440586ea-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.23", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f704fc-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.236", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765145, "uuid": "44c334f9-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.248", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765154, "uuid": "4a34ec1c-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.26", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "499fa700-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.34", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "497564ee-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.42", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "49691b08-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.47", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765433, "uuid": "f08ba257-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.52", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764424, "uuid": "96e3c373-0fec-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.67", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765162, "uuid": "4ed229ae-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.69", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765412, "uuid": "e3ff723c-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.77", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765344, "uuid": "bb1db60d-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.79", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752245, "uuid": "3be474e4-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.90.163.37", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771757344, "uuid": "1ae16750-0fdc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.91.133.229", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "499a0815-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.94.31.102", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "497cfcf9-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.94.31.109", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "499bc6f7-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.94.31.116", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "44060d60-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.94.31.141", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765154, "uuid": "49daa307-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.94.31.164", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f262fc-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.94.31.176", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765154, "uuid": "49d63311-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.94.31.192", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f735f0-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.94.31.23", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "49c7b7c5-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.94.31.57", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765153, "uuid": "49664eb9-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.94.31.59", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f2d832-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.94.31.63", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765325, "uuid": "b00c3a3f-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.94.31.90", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "73ce10c6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.13.160.51", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766117, "uuid": "88019292-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.13.80.25", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "395ff645-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.229.1.27", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766056, "uuid": "638f3401-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "49.176.254.54", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766165, "uuid": "a48d76ae-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "49.228.131.61", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "5f88f530-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "49.245.76.121", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766113, "uuid": "856db984-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "49.49.149.140", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771777806, "uuid": "bf18e87a-100b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.16.162.140", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752245, "uuid": "3be412b5-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.181.3.211", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766043, "uuid": "5bf185f1-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "50.193.152.206", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "64fcfc44-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.146.67.244", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766025, "uuid": "5170abe3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.185.111.250", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "393dacb3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.8.190.147", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "394542fc-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.87.231.196", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766165, "uuid": "a48d287a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.153.83.218", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771743124, "uuid": "ff6fb54b-0fba-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.142.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771757706, "uuid": "f2c4a09c-0fdc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.162.195.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766035, "uuid": "577ccdca-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.50.89.116", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771803784, "uuid": "3b72a18f-1048-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.168.50.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766029, "uuid": "53d7094f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.231.227.198", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766093, "uuid": "79cee939-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.238.21.198", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771767424, "uuid": "92f2f5fd-0ff3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.107.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766026, "uuid": "51d64adc-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.246.109.249", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766084, "uuid": "747260c2-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.45.171.82", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752245, "uuid": "3be4efc8-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "64.89.163.227", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766165, "uuid": "a48c2f34-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "65.181.70.101", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766055, "uuid": "63547806-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "65.24.134.112", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766087, "uuid": "7665fc99-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.232.181.198", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766010, "uuid": "4879fc1f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "71.32.43.224", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "5f94d3ab-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "71.32.43.225", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766084, "uuid": "747edb84-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "71.32.43.226", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "39275b65-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "71.32.43.227", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "830f62bb-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "71.32.43.228", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766004, "uuid": "4506d6bb-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "71.32.43.229", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766055, "uuid": "6346c4b0-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "71.32.43.230", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766067, "uuid": "6a1205c3-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "71.32.43.231", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766033, "uuid": "56072998-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "72.69.23.74", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766003, "uuid": "43db02ae-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "73.179.119.149", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766059, "uuid": "6546140c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "74.88.174.31", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766050, "uuid": "600281e2-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "75.214.255.79", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766048, "uuid": "5f3a5631-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.168.101.52", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766079, "uuid": "717a07a7-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.171.119.16", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766084, "uuid": "74b4bb5c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.174.79.191", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766825, "uuid": "2e3475d7-0ff2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.247.88.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766026, "uuid": "51edef7d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.111.82.210", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766093, "uuid": "79e2fabf-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.187.80.199", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766002, "uuid": "4347903c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.189.191.216", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766057, "uuid": "648f4e11-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.44.199.50", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "64f8a880-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "79.11.251.188", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "64d5c31a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "79.150.114.245", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766029, "uuid": "53d112ba-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "79.194.113.184", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766052, "uuid": "611e3b7b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "79.200.94.3", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "395f016b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "79.25.255.106", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766032, "uuid": "556eefe7-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "79.253.167.204", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "3933d968-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "79.98.159.151", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769583, "uuid": "99ecfb5e-0ff8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "8.131.77.227", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766076, "uuid": "6fbe5411-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.145.21.230", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "3926dcbe-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.147.3.138", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766003, "uuid": "442304be-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.15.35.6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "65171ce9-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.181.174.131", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766005, "uuid": "45205271-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.208.104.221", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "8361dacc-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.70.150.26", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771747565, "uuid": "561394f0-0fc5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.73.221.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "393c9a8a-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.127.110.15", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "8370d44f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.137.218.197", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766096, "uuid": "7b53c089-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.139.95.202", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771748044, "uuid": "73d1aefc-0fc6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.25.63.150", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "NetSupportRAT", "colour": "#d30a30", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766165, "uuid": "a48ad12c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.67.120.16", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766006, "uuid": "45e9999b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.164.170.187", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752306, "uuid": "5fde4d65-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.21.173.41", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "64a69160-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.243.234.56", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766165, "uuid": "a48b0828-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.31.161.242", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "4404edf6-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.54.33.122", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765154, "uuid": "49cfb6e8-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.54.33.133", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765144, "uuid": "43f3f7ee-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.54.33.188", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765154, "uuid": "49d04d60-0fee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.54.33.34", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766083, "uuid": "73aa2e39-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.80.158.105", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766008, "uuid": "4749c56c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.83.80.232", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766110, "uuid": "83ae4603-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.85.168.249", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766066, "uuid": "69f893b6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.86.236.173", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766012, "uuid": "49ca9a79-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.108.92.26", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766078, "uuid": "70a0b694-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.130.151.85", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766084, "uuid": "748475a8-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.163.233.16", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766165, "uuid": "a48b4ff7-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.24.246.87", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "395f87ad-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.242.34.8", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771768263, "uuid": "8778d288-0ff5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.121.84.55", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "831aa66b-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.138.104.129", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766009, "uuid": "4778d78d-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.248.15.32", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771771324, "uuid": "a7e1fb4f-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.151.195.33", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766058, "uuid": "652ba56f-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.180.236.68", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766109, "uuid": "8382b0d1-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.94.48.82", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766116, "uuid": "87a3f8fb-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.155.135.65", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "5f8d8932-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.31.44.99", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "393a58c4-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "90.177.125.64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766111, "uuid": "846f5145-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "90.180.227.121", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766039, "uuid": "59c4d202-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "90.90.205.29", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766114, "uuid": "864d42c0-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.164.69.13", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771764424, "uuid": "96e64843-0fec-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.206.169.134", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771750085, "uuid": "34671cc0-0fcb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.92.243.113", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766165, "uuid": "a48c90e6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.27.204.65", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766078, "uuid": "710f6576-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.43.24.71", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766049, "uuid": "5f9fa660-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "93.41.227.158", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766008, "uuid": "4701946c-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "93.51.102.25", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778406, "uuid": "24ffebcc-100d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.156.152.23", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771748106, "uuid": "989daf1d-0fc6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.156.170.255", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752364, "uuid": "82cfa963-0fd0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.156.237.217", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "393a5fbc-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.168.120.202", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766097, "uuid": "7c723ec6-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.19.38.94", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766008, "uuid": "4730b5cb-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.67.52.56", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771766008, "uuid": "46e9f73e-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "96.49.197.7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "393b74f5-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "98.197.230.147", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771765985, "uuid": "394416a7-0ff0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "99.53.69.161", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775345, "uuid": "041fdcd5-1006-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "admin.sevfrtdxs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775346, "uuid": "04bfe939-1006-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cn.unionlever.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775347, "uuid": "056e039c-1006-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "d3pk6xm84jcfh3.cloudfront.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775345, "uuid": "048b833b-1006-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "dbss180.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775345, "uuid": "04795a18-1006-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "descamisad.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771778589, "uuid": "920c3a0f-100d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "down.1756520.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775346, "uuid": "05459d12-1006-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "downali.game.uc.cn" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771748047, "uuid": "7585c3c3-0fc6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "eploits.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771748106, "uuid": "98ad03a0-0fc6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "gatepass-corp.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771748047, "uuid": "7562105c-0fc6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "gudiop.lol" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771757525, "uuid": "869dbf74-0fdc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ic.hopto.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771752905, "uuid": "c5599b5d-0fd1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "idk.mangovn.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771769945, "uuid": "71a20851-0ff9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "joieshk7.hexalink.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771770364, "uuid": "6bc9f47b-0ffa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "justwatch.life" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771748051, "uuid": "77a28457-0fc6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lun.onters.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771748113, "uuid": "9cb3c6f9-0fc6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lunc.revio.live" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771748106, "uuid": "98aa46a0-0fc6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lunp.revio.live" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775344, "uuid": "041aa8d0-1006-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "mario-72b.pages.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771749185, "uuid": "1bd0fa83-0fc9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "odbsasjd.upgrade4file.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771741805, "uuid": "ece8569a-0fb7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ojqxtq3l.ironrock.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771748048, "uuid": "765142bc-0fc6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "product.360academybd.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775349, "uuid": "06be3cbe-1006-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-a6ff63da26bb4484928a6fe2f3fbab17.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775345, "uuid": "041cc479-1006-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-bbbdebc2599c4d74b04c5d53e439f7a7.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771762925, "uuid": "199df3d7-0fe9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "r8ada0zp.novacode.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775345, "uuid": "04220bbb-1006-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "sutterpoint.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771748113, "uuid": "9cf06b24-0fc6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.fortalezaseguros.ao" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771748106, "uuid": "98c3f41f-0fc6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.pingodoce.pt" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771775344, "uuid": "04191bb1-1006-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "xn--h6qpop2cq9nl9c.pages.dev" } ] } }