{ "Event": { "published": true, "date": "2025-04-22", "threat_level_id": 2, "info": "URLhaus IOCs for 2025-04-22", "timestamp": 1745366589, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "48ab2baf-b87d-40c2-87ca-e3f19f14d96b", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1745280184, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280184, "uuid": "a5bc5e5b-2a08-4a15-80f0-6ec219b6b4a8", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280184, "uuid": "31d6bf30-6a7a-4c43-adaa-609a0ad85601", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280184, "uuid": "b15343a5-6c9f-4dea-8296-f90496ae8c0d", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280184, "uuid": "55876693-f74c-4e21-a585-ce90b2bf564c", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745280184, "uuid": "b55ca065-e493-496c-9f4d-b29302fbb212", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "115d85b9-1f0e-11f0-82df-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1745280572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280572, "uuid": "f13d7909-3af1-42dd-bee2-b78fccb52353", "comment": "Malware payload (Healer)", "value": "5c3903a1b3a40884d28acc68ded330b2", "object_relation": "md5", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280572, "uuid": "fd8d4132-e304-4ead-b65c-6d741befd472", "comment": "Malware payload (Healer)", "value": "4aa8a6f933a5f11461b3c78f522d8495c2e85c79a95f397064c7c1b253c253c3", "object_relation": "sha256", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280572, "uuid": "aa98c44e-e06f-4721-bc22-ef89c36c32de", "value": "T1808533F24BFB5A98C5040C3FC89468945766EB67B3D8D937C1EB64E5C11B37283812", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280572, "uuid": "a97d4a0f-62d4-465e-861a-073ec3362a64", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280572, "uuid": "a81d596b-bf41-4758-a7d2-2a84e10ac67e", "value": "49152:ls/9rd7BmpmM7CbEfIMWjnfKKjROIftRxFCKZ:ls/rsp57KKIPzf7xpFr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745280572, "uuid": "8a85f91a-486c-425a-a9e7-a29f89119c9e", "value": 1740800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280572, "uuid": "765d2d18-47b8-4fce-a016-de04b8421faa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2bd9c8d-1f0e-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745280924, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280924, "uuid": "6fce4e0c-781e-4264-9fd7-bc0805e0e5ba", "comment": "Malware payload (CredentialFlusher)", "value": "17cfcb22edecce4f469f1bc0d9034980", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280924, "uuid": "7236a02b-ea7a-48ba-82d3-9b5c3e728379", "comment": "Malware payload (CredentialFlusher)", "value": "0fda51996f427c2f4a6e8c48d6e8b2a2d2330ae33ba24cd13dd7baa675d7ac8c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280924, "uuid": "97e6e852-ca04-404a-b117-81be7a9461c8", "value": "T1ED259E0273C1C062FF9B92334B5AF6515BBC69260123E62F13A81D79BE705B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280924, "uuid": "50426cbe-b043-4f29-8412-69ea50551f40", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280924, "uuid": "a3a49795-e8c1-4c63-af81-d8298117c463", "value": "24576:uqDEvCTbMWu7rQYlBQcBiT6rprG8aGKQ:uTvC/MTQYxsWR7aG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745280924, "uuid": "b35eb529-75c1-4809-be7e-ea7d0b3365a5", "value": 970240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280924, "uuid": "e8e80a57-7580-427e-acf6-b195b2ce4df2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1745280965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280965, "uuid": "944f3276-5b5e-4631-b9aa-e2b918f1f246", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280965, "uuid": "b639911f-6a73-4946-8eb3-4048a041913a", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280965, "uuid": "58c4b43c-51f0-49db-b63a-70fa06be6e1f", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280965, "uuid": "663b2055-252e-48f0-baf2-7b1e76a3e578", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745280965, "uuid": "a7ac7fd8-1c5a-4162-990c-d3e5d7e33209", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "125a636a-1f10-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1745281433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745281433, "uuid": "0db7e5ee-c1e0-43f2-87f2-bb4dddb0a0b8", "comment": "Malware payload (Amadey)", "value": "e0cb99b9c87f6d947c56572380f67e83", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745281433, "uuid": "6f96f6df-2cf7-4560-9c35-6642ecd30979", "comment": "Malware payload (Amadey)", "value": "d5968b83f07bc2617926ea76f2146968232654958671921c88679a068d691d59", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745281433, "uuid": "ad4d7bbd-57db-432b-9cba-28e076ec9c06", "value": "T174A52343F7FD8172E9250B345BBA06C71531BA60D678936663883E0D8869263FE397", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745281433, "uuid": "881da90c-3cd1-4a9a-a2e0-de8774adc59b", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745281433, "uuid": "c5e78abb-9605-4698-bd0c-b8642de589e6", "value": "49152:TGIWq/lZnfEWL3EYurln8PSspM1w1rh/QAUFj2CIrOo9H8Yw:PaQxel89pjtQAUFiCvMc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745281433, "uuid": "394ae944-7776-486a-9b91-cdfb67857783", "value": 2191360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745281433, "uuid": "0f9203bc-a873-4cf3-9e7b-383ef023ec73", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89a5c10c-1f12-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745282492, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745282492, "uuid": "abfc8924-e373-49d8-a7d7-a9c40feb671e", "comment": "Malware payload", "value": "20654c9cca8255afe3dd58f35aeb35d6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745282492, "uuid": "a932c086-1ccd-4f51-9d26-f3f06df8ce49", "comment": "Malware payload", "value": "ed23311bfb59751dce5c6a82f95a29ad1431e3f0a980191721fb4054683cf726", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745282492, "uuid": "1767c9df-55f8-456a-810b-1470636c2618", "value": "T1F12633250CED15F0EC40A7FBA0F779987A30393B96F24A95EF960D00CCE72E499257", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745282492, "uuid": "40552c4d-a370-4171-8fdb-4bf42baffda3", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745282492, "uuid": "b00cab37-203f-464a-8033-f29e36a057eb", "value": "98304:SDAVCAyhV++4E7Bw34yD6SPhzAF1zuoO3CpfFg7dBIokhb5v9UwVUZc:2puUK3WSPh6/eCA7d6okB5l5g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745282492, "uuid": "b5b8d1f3-18fe-49cc-930d-b82f188728de", "value": 4589568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745282492, "uuid": "c893fe8d-3585-44be-aa38-5a1fba4f614d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60d0c2b7-1f13-11f0-82df-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1745282853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745282853, "uuid": "a0c96fbc-50b7-49a0-b97f-cb0921fc2511", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "da244a56130ed5f024fc2d6e7d20417e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745282853, "uuid": "ba170676-f2bf-4342-9bb2-ddd6a46a10f1", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "343e9649df5c163dd14b8af48242aa1b8445eb778207455c26173c161958acfa", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745282853, "uuid": "7859f989-a99c-47ad-8abf-68948a5066c9", "value": "T1F9A533FC5AB20048EBA60D73589618553A71E2D8A2B13B3F1B1547FEC5D3A0AC4E63", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745282853, "uuid": "9ae943e9-81c3-41ac-a2bd-4f4371cee43e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745282853, "uuid": "0043dfe0-395c-4c01-a230-85a849f6bd87", "value": "24576:p/fCSatD1PGJ6cwiOnLI2Wp4Vt7DVQcbXUMKuRiIUVIYwGiXzfAmOGG8J14oBXlb:p1atDMJjwiOntW80K/4lwbzXVt6UXZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745282853, "uuid": "01997c04-2bf1-4e93-91a2-7ca541414692", "value": 2118144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745282853, "uuid": "e891d94d-3f16-439f-a923-c138e51c074c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1745283425, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745283425, "uuid": "12493d44-42f1-40da-946f-8ac8cba83ae1", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745283425, "uuid": "1994a522-b3a6-4b2c-adeb-e687c5909a6c", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "curl", "colour": "#c2a286", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wget", "colour": "#5D3E49", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745283425, "uuid": "bca0de62-119d-4362-9ef0-2ed1ee3b6e0f", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745283425, "uuid": "95ab15b1-0db1-439b-984c-cb5896f720c2", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745283425, "uuid": "14b681f2-f562-4904-ac43-ac08bc479852", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70e730f8-1f15-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1745283739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745283739, "uuid": "c8952680-510b-4f04-955c-a39e8d7e34eb", "comment": "Malware payload (Amadey)", "value": "acd3da0f835aacc3e24f9c13304727eb", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745283739, "uuid": "b45e872e-f499-4580-9798-eb6c61f3a0bf", "comment": "Malware payload (Amadey)", "value": "27304beb569bfbdc48f63bb578f8adcdc6051349d6971fd216ee4b0f96e08f5b", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745283739, "uuid": "2f9710fb-4a69-4fb2-9a46-42a9a7f908e8", "value": "T1F7159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745283739, "uuid": "40294dc1-9243-4449-94a7-3cca466758af", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745283739, "uuid": "453a7aa8-3eab-4f4b-adb1-96de3739d306", "value": "24576:1qDEvCTbMWu7rQYlBQcBiT6rprG8aepV:1TvC/MTQYxsWR7aep", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745283739, "uuid": "df7fd178-8400-4b2b-9f34-a2131590a091", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745283739, "uuid": "56d1fbc6-6cb8-4be3-b65f-19c9141a1ae9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed7cdc07-1f15-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1745283948, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745283948, "uuid": "5084759a-eb1a-4e26-8dcf-587c53faa36f", "comment": "Malware payload (Amadey)", "value": "772fccc8e24952361639832383f539ad", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745283948, "uuid": "10a444ae-9771-4dbd-a38f-5f8c1d29fb0a", "comment": "Malware payload (Amadey)", "value": "52361be82676ee24ebe76772e37d4c037a3f23e1f8bba881eecda730b47bef95", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745283948, "uuid": "bdcc1ba0-faa9-4782-98a1-cdb22a3c4c03", "value": "T18CA5332B27ECC426DCB163B41CF212D35E35BE90673893932294AC5B68739B1B5347", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745283948, "uuid": "9d7d46dc-0ccc-4195-989f-b50ceed76066", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745283948, "uuid": "d75d9c14-c980-4e27-a00f-f8e2de67cba5", "value": "49152:gYIWqQiRnd5Hq2nYbXLofNOEAddGMAXnNhQk/Rokh5rm2pN2p6nVdF/:0Bndw2GXcfhPJmkhgK/zF/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745283948, "uuid": "5b4aaf1b-0a4d-4a25-9172-717c691dfbbb", "value": 2213376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745283948, "uuid": "235d669f-196d-460e-a064-32861a004166", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4098987-1f15-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745283959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745283959, "uuid": "8c0e29f9-d0bc-445a-b8f8-30c2b1116dbb", "comment": "Malware payload", "value": "837a6aa543ea63b7ba669cd566a58a14", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745283959, "uuid": "e982a035-68f2-4691-a29b-75f06f3003ef", "comment": "Malware payload", "value": "aec82cd3ee1213c8cabdde7e3ff7fc01bdcac0760c847f440bcdc7c6fbd65c80", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745283959, "uuid": "add72466-6a22-416a-8a5b-53577a348d3b", "value": "T1A5A633F9671DBCE5E8D8E47945EED006148EAF528A431D1209FEBA4A4A3EF434FC23", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745283959, "uuid": "730af213-8eaa-4b5b-8a9f-a66886da66c7", "value": "69585df030b601e329329e11206f7dbe", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745283959, "uuid": "0a6a2415-1f0d-4899-b029-5726d8f26ca7", "value": "196608:vsRQTGEW2OActk7pWAYXL/sghmq8lvMzbYk6fLTTAkTwdyT:2EW2x8sWPXbsUMMzbWLpiy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745283959, "uuid": "1af067ee-f497-4f00-87c2-d5df4e370bf8", "value": 10235096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745283959, "uuid": "8f6e8a68-cc40-4fdc-bd54-222321db5441", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e1df618-1f17-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745284486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745284486, "uuid": "5e19f438-f4cf-45d0-97f8-b6615e61369c", "comment": "Malware payload", "value": "6e20cabea07216725ecfa9a1dae534e0", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745284486, "uuid": "a3c0667c-968a-4a9c-bfe2-89b8a8827d60", "comment": "Malware payload", "value": "d85aaa21b304e9ca1bc882971a5f6630936cdf1ea9ab136b8c79112680c1a989", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745284486, "uuid": "07d7b053-a9c5-461b-860a-202c7c2505ae", "value": "T1959533419BFD8091C83D36311873DB2E7A666DF8B38A3203DAC0A475D867F6DE0954", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745284486, "uuid": "1fdb5908-a1f3-4f5b-b9a5-9045b6c73041", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745284486, "uuid": "8462ebeb-ff04-402f-acde-2164eb8431b0", "value": "49152:ZARgF5zEM0Uq0vsnkrKw2lSt/+u5Dzzi:ygFClUnvsnRw2lO55D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745284486, "uuid": "402f5d41-7144-4040-bd8c-0cb320626576", "value": 1905664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745284486, "uuid": "dd5dc19a-c51b-4cf5-ae15-77adeab268be", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d58a4a4-1f17-11f0-82df-82aee05be84a", "comment": "Malware payload (DCRat)", "timestamp": 1745284673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745284673, "uuid": "939c102c-2404-4581-850c-f946441dfcd7", "comment": "Malware payload (DCRat)", "value": "40890b21ed775fb4f01d145040f4c25e", "object_relation": "md5", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745284673, "uuid": "a42cbf9e-1221-4097-bd58-e7a116b745aa", "comment": "Malware payload (DCRat)", "value": "4f73bbaa5f5ed551c13f332e76ef86fe32349afc5512ecbf62f4438db754709b", "object_relation": "sha256", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745284673, "uuid": "9056b48d-ff7b-43a8-9ff5-6eba823291a3", "value": "T10A75122853D85B41E6FE5FB53864905147B4B702EC17CB8DF2C0618D8A73B8AD732A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745284673, "uuid": "3ce6233d-013e-4c1b-88f2-496b7d4be8fb", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745284673, "uuid": "a11fb707-7d2d-4bb8-9232-52c56edc1101", "value": "24576:S+JEfJhZ8j53sY1jCeqm6qv80MaooQajSMpHYWOkEfW5EQJZrUVvsgMYHQgdUU2G:S+a5csqCeq08moPajSQY5HYryHACWC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745284673, "uuid": "5ab59103-d43c-4783-ad2d-f83be8ea1532", "value": 1561088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745284673, "uuid": "550d1a2d-e77b-441e-9f8b-aabc2bf42ab0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "048034cb-1f18-11f0-82df-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1745284846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745284846, "uuid": "4cb7c7f0-96c1-446d-b90a-e9e36ab5e52b", "comment": "Malware payload (Healer)", "value": "d483d5448894a80b965d6a68d80c203a", "object_relation": "md5", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745284846, "uuid": "94a2bada-7413-4708-842d-5f2cf77f4db9", "comment": "Malware payload (Healer)", "value": "b508d94d0eda89a68d2470691844163096308c856c523ec244ccf73a6803284d", "object_relation": "sha256", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745284846, "uuid": "399a7c75-5f73-4fb3-8581-5c882d2316f4", "value": "T1D8853370CD9A551CD8FE0333DB77ED0FAAC6C2264024D389DECC7E9E9057580619EA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745284846, "uuid": "451f7fba-a5ad-4a09-a8ec-44d791c4eced", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745284846, "uuid": "cfbb1bb9-17f5-4c72-9b7d-f8467853221c", "value": "49152:ne3vZmGTZ+fPsJ/E0/qXwyPIGU/zoqF4V:e/ZmGF7J/E6pGU0k4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745284846, "uuid": "ba116634-c011-4c87-bfea-f5d30e809bdb", "value": 1756672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745284846, "uuid": "5e335aa8-b396-4ae9-9c94-90eb7b4f112d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0556117c-1f1e-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745287424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745287424, "uuid": "32608154-bef8-42d3-a469-9a91c401536c", "comment": "Malware payload (CredentialFlusher)", "value": "a60875f6d18cb295f3d6ba55648fc709", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745287424, "uuid": "94f85d28-3186-42af-8280-75f663d41229", "comment": "Malware payload (CredentialFlusher)", "value": "c2e9a1715f66457d40339ca83e0fdb7b1dcd46bb13219cd385289c5d788c8854", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745287424, "uuid": "fa02b994-8e8a-4129-b77b-7dc8d725ea7d", "value": "T1ED259E0273D1C062FF9B92334B5AF6515BBC69260123E62F13A81DB9BD701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745287424, "uuid": "e6968ee3-19a3-4a1a-82ac-a38403410aca", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745287424, "uuid": "449676fd-2dcf-41ba-9510-f6ad46a151b9", "value": "12288:aqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgailBjBR:aqDEvCTbMWu7rQYlBQcBiT6rprG8asd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745287424, "uuid": "df1265ad-78d1-45f3-aa76-7b4a1107b30b", "value": 968192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745287424, "uuid": "7f1d3a03-8344-4fef-99b0-ac6415c1f4a7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b754398-1f1e-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745287542, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745287542, "uuid": "b63401ea-804b-49b6-8acb-7528830ed13c", "comment": "Malware payload (CredentialFlusher)", "value": "aceee18657f8d32692187c97794904c5", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745287542, "uuid": "5d73b2b3-2fee-4c1e-a65c-cb70697ffb04", "comment": "Malware payload (CredentialFlusher)", "value": "de1a8111257b6d476edbd50f13daf69ea8e3749a03001ed3ed739b5a7c466d9b", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745287542, "uuid": "d1146f15-c922-4460-a6e8-8fdb90ba9aca", "value": "T147159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745287542, "uuid": "18464554-eef7-4b2e-856d-5f2f6cd6773e", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745287542, "uuid": "633c6365-1120-41d6-9b78-9039b2c50001", "value": "24576:vqDEvCTbMWu7rQYlBQcBiT6rprG8ae7V:vTvC/MTQYxsWR7ae7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745287542, "uuid": "f25f264e-9d10-47a2-9ff8-52ae316d3e81", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745287542, "uuid": "73fcd59d-9f89-4349-9c41-722e72bbf110", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4789736-1f1e-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745287745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745287745, "uuid": "f4844acf-87f5-470e-b714-5ac933e1f840", "comment": "Malware payload (Mirai)", "value": "9f8a7db4b99ab439eef3aba840e85104", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745287745, "uuid": "c1d5e20e-1c50-427d-9b4f-8b508f1d2e74", "comment": "Malware payload (Mirai)", "value": "9e203815c981b6aa140f6996874dad1dab133b4e83046a49cc018cd36a37239a", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745287745, "uuid": "a91cdfb1-28e9-491d-8b90-fda0429b080b", "value": "T117C2E193A0E9CD05C863413B7D1F159B61386528138DFE1A373AEFDC62464B8A276E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745287745, "uuid": "e6f285c1-4c7d-4ca9-bbc2-642651f1fb1a", "value": "384:MRSx9WXUx5+bkbRaliVErjrL9VD9jPwrSaf5dwapDyCTYHHJC8oytPFnAqV/Llk1:t5+Kcrb9VDJe5FLTYTlPFnz/ydE1Ot", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745287745, "uuid": "be57beef-ec7d-4070-a08a-4510d5f58f9f", "value": 27704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745287745, "uuid": "b86ae8de-48cf-4e59-8d7e-a00ecffadbd9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e11b2401-1f1e-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745287793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745287793, "uuid": "d4ba1378-e447-4454-8cac-cd768ef026b5", "comment": "Malware payload", "value": "86ec08526c44f395d0d8cf9cd2c75551", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745287793, "uuid": "84fa7219-140c-40a0-9453-320b6f3dddaf", "comment": "Malware payload", "value": "05406c13d43a3796c29602a73c8d71df619dc8145840d28d27414fea40fefcdc", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745287793, "uuid": "5c9b5008-31d0-42bf-85aa-03b2a48f9098", "value": "T184953374DB4D0C69C5BDF5B1A22047E7BDBC432C99E61723A48086F8047075EABE5C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745287793, "uuid": "b3bad860-da19-4baa-bc80-aa61c7fd5e8e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745287793, "uuid": "78077ac2-5375-4a92-a80a-63fb0e18e4bb", "value": "49152:RG9Q8iHd+YdN1rHkREoYzWgZSa+YSCC+9Q5toegZ:Rwi999kRERzWgF+YQs6yeg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745287793, "uuid": "05ad0816-46ed-43cf-b5d9-f06b66fa0e5e", "value": 1895424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745287793, "uuid": "709e3242-1aef-441a-8241-f09ec637017e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fbb0d8e-1f22-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745289348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745289348, "uuid": "0c5993b9-8b1a-467d-a3a5-fbbff428a8c9", "comment": "Malware payload", "value": "21674c75641366d28e6efe700d35953a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745289348, "uuid": "5e504ef9-5044-42cf-bc50-5c9955dcc5d3", "comment": "Malware payload", "value": "f2f55b59bb845fc702f3765b0f432b4500e643c12d32d6cf6d10414d8c1ab38b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745289348, "uuid": "b221b800-64af-42a8-b8f0-c8e2290f90a7", "value": "T14F26338B4DC246E8D9EA63F09F8EA3A947E901426F0FF6535540D13E3A2F859230FE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745289348, "uuid": "3499c7cb-9fcd-4f70-97e7-632a6979e0f2", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745289348, "uuid": "1bdaf828-6ab8-4bd2-8d50-835d82b201a8", "value": "98304:iOF86P7Nwq7Q6O++eC+b1Fa8pEHEgu/KqapUZGLTqbsA27:iOW6P6q7JOELO8pwqIUZGLT0sAw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745289348, "uuid": "fbfd3382-9bc4-4e87-93d4-5e4303708483", "value": 4634624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745289348, "uuid": "7f0f732d-1cc8-4a7a-adb0-68bc6ef39059", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "074467b5-1f26-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745290863, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745290863, "uuid": "69db8325-abf2-4da5-b96a-d529ad2bd50b", "comment": "Malware payload (Gafgyt)", "value": "5457a8a8152f1efab56e19365bbcf450", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745290863, "uuid": "c8c6ba8c-0cb7-4342-ab08-82c6ea1ebfc2", "comment": "Malware payload (Gafgyt)", "value": "a44dd007feb329a7a02ffc1af4c82a2d6d30d5155c20817cbd3cc9bd9681563c", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745290863, "uuid": "0fc24f41-a478-41aa-8cae-ba4a1ab939ba", "value": "T184F0B41F125BA1B1834A0CBDA3293283C0620343B7578E097BAC5BE6BF3617CE2415", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745290863, "uuid": "59f62ac3-b0a4-4056-a579-e82464fc13b6", "value": "6:hLgxioXgFZGoXWDBFFnOE1aQIHsd3NyHEsd3Ny4kAuHd3N+YeJuhkd3N+YaH5/dt:lNowFgomDBHO0adWR25RuLpkoHppUBe1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745290863, "uuid": "b08465d7-97d7-4c75-b6fc-6cae10e45c89", "value": 649, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745290863, "uuid": "d76124ac-e6de-4f34-b636-5362f41b5919", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "075f1df2-1f26-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745290864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745290864, "uuid": "790b77ca-b5bd-4c71-89aa-189f31e2d65d", "comment": "Malware payload", "value": "69377da586286fb8819b6bfbe528c52f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745290864, "uuid": "8b02dd15-147d-4175-ade1-cad51e66516c", "comment": "Malware payload", "value": "d70de965e00ac625fc24c419355aa94c3c02ce678c68109d75e851dd92c330ef", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745290864, "uuid": "08582532-df5a-40a0-8023-f65a2b9c97d9", "value": "T15E2193E922612D75BCA6EA3B326E444475D8E48A55CEAF192CEE3CF4588DE0478017", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745290864, "uuid": "ee7f9683-7e0a-406c-b549-8be7b81b03ba", "value": "24:UprhI4jprhIaprhBqIprhAyprhtprhSAprhbROQprhIyprhO:Up9I0p9Iap9cIp9Ayp9tp9SAp9bRVp9c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745290864, "uuid": "25f3eb5c-f16b-4af8-81d0-bd8777130f70", "value": 1176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745290864, "uuid": "026fd177-db14-42f9-a652-c1588d77f87c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84bed772-1f27-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745291503, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291503, "uuid": "9f3971d9-10d9-49c8-8dbf-abaebe8760ed", "comment": "Malware payload", "value": "b1445e6748afe05824b9ced37facc4be", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291503, "uuid": "c25d7c7b-06dc-49c8-b6b5-33cff79220a1", "comment": "Malware payload", "value": "ca30d481e44fb201fed9dbdb4e547b115f52f4e6975fdf9fa3c8e21ef24da2c3", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291503, "uuid": "910e53ff-2a0e-4ca7-9c8f-57ceb41ed30d", "value": "T142853391BD26CF3EC4A43E342D8E75532A5D7C578AA7A1F1A18402BC833F35253C6B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291503, "uuid": "302d1f74-286e-4fff-a776-fbb1ed88ddd8", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291503, "uuid": "135e37f7-257b-4845-907c-787b7765a928", "value": "49152:e702ivIQ0hHAJZEB4mgWuzXzbYpgTdZ9fBBJA/cQVWoEe:o02iFcHWzWIXHY4b9fJDX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745291503, "uuid": "d263b80b-7a75-4140-9e44-f8a4109c8cd1", "value": 1859072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291503, "uuid": "2e4d05c4-251f-49ff-b196-b18216ba883d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef773bd5-1f27-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745291683, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291683, "uuid": "92b14a82-3ea4-4eac-92ee-b2187e133947", "comment": "Malware payload", "value": "a0d89ae1ce8b6fd3c42f60d5afdb4845", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291683, "uuid": "f100a8ee-0227-44a1-b305-ead268b438dd", "comment": "Malware payload", "value": "b7e6f4926a8b037e6074d60cc89e4e673108a5706ffcde349e222dfcbacb481c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291683, "uuid": "9a7e4ca6-dd7d-464a-a528-eaa88b7b7b88", "value": "T18EF3DE2D6E21BB7EE6A882314BFA6FB4D35611D332D1D680E17DC6145FB524C0C8EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291683, "uuid": "aff6d985-7944-4609-acc0-401732ff64b8", "value": "3072:FgPvEFmoALQzQeC0obNpnBl/iK15CxQol:CvEZLoZpBn15+QW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745291683, "uuid": "f7b1f3e9-0756-42a7-9a53-65064171cbff", "value": 162448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291683, "uuid": "eadfb089-aa9b-4080-9740-97200c77aa4c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47e92ef1-1f28-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745291831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291831, "uuid": "1c4bf2ca-b869-462e-a9b8-f665fe0b51f6", "comment": "Malware payload (Mirai)", "value": "1f86d4ad535cdf8457166c62eb4cfa42", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291831, "uuid": "5aeab20a-e306-496b-97c0-2175aff8192d", "comment": "Malware payload (Mirai)", "value": "3ae2cf243ce7bada3a5841f5a7561e6e09d44fe17afed69679927d5da1e2ad39", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291831, "uuid": "d2e0a40a-d426-43dd-8647-ffd77fc930f8", "value": "T1E0C3B748FA55A32DC7E1B6FEEF1812CE33370798B3EA39268E32065537C9B2565354", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291831, "uuid": "951ba7fd-c924-4644-a2c9-5cae2af70e41", "value": "1536:JBnHwBXWtGfqpuKNKdDYD1wcb6n+ep9GoSz3yY+nPHvvY8L6OV6FQ2MHiMOc1gPl:YctGfqpuKNKdbyMvvFXOc1gP2VxQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745291831, "uuid": "2c7c3c4c-6495-4499-8c5f-aa3f6663a986", "value": 118356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291831, "uuid": "fbcbf19e-b0e7-45c4-9985-a7f15cdf4584", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "effaf8f3-1f28-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1745292113, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745292113, "uuid": "022220fb-4f66-465c-b292-bf65eccba58e", "comment": "Malware payload (Amadey)", "value": "55eb09f9eac1b5be54dd2e61b37e897a", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745292113, "uuid": "d8dc94c4-68bd-4c85-b88e-6bffb779115d", "comment": "Malware payload (Amadey)", "value": "fcf4e2b55e96646f86d02dfd8eb0929057505ac193bff8c4470a60e9ab400c17", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292113, "uuid": "ac6cbd14-abc8-4c70-a13e-0cbb0d143051", "value": "T12BA52347FAEDC032E9A9637048F101C7073AFDB15B2942D1578AAC5E48795B07AB67", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292113, "uuid": "1f6e4b9d-ed80-4c58-8ccc-c1c84dba0c80", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292113, "uuid": "bf2c79e2-ef4a-4349-9ac3-92c58330eead", "value": "49152:yUIWq++xwNLrSc8NDm8zTMu1WOS+GbRp3rghI5:eLwNANDmyurDMo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745292113, "uuid": "8828fe94-38ef-4806-8dca-2bd36aa85243", "value": 2166272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292113, "uuid": "ec5096ad-6b00-4c42-b77c-4bf5c2cfec1f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25b74e17-1f29-11f0-82df-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1745292203, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745292203, "uuid": "2941dcf4-db21-4431-9793-5779d7fc682b", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "5f26901da330e2aec6e94f8b27456602", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745292203, "uuid": "b15047aa-87ed-4aa7-b0f4-6a239a5714ff", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "cae33ce2e5f82ff23a8c24e1f6205dae3eb701158efb489e24b4e730482c7fcd", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292203, "uuid": "caa7aa8b-e4e0-44cf-9f78-35166ac8140a", "value": "T1E8A533A776DBF379D13057F0CB8C9D46786C7A5414B91F21078EC9AD38722EB222AC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292203, "uuid": "e00679ca-25c5-46ff-8382-a1858950ee30", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292203, "uuid": "5983c66d-96a1-4c17-8bbe-91accaed5431", "value": "49152:gQ28elctvIKK7fMCegDccTxtlR7j+dHUi2yla:gh8eatvIlwCP/TDgla", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745292203, "uuid": "03a0eead-5060-4d4a-bc9b-a64cd4d09cf0", "value": 2172416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292203, "uuid": "781913cb-f272-4316-ac90-d64801a625b8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74b059e7-1f29-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745292336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745292336, "uuid": "19ab9715-8e81-41a0-90a4-8ce6a8cf4874", "comment": "Malware payload", "value": "d79ee761d63f3e4a2420ea96681170c7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745292336, "uuid": "c07bb5e3-7d50-43e1-942d-62d5133a7783", "comment": "Malware payload", "value": "54435d26e53f18d6130f3566a87df5b9f61fafaae4c21cd7e9fbfaa29bdc0ef0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292336, "uuid": "a526dd67-72d6-49ab-80b5-ba6a4b4ecab3", "value": "T17624CFA74CB8362454A3C26836106273B4D891F7FB9655D8E435F19BB0E0E0EBB76C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292336, "uuid": "89e0e72f-ea2e-4a6b-86c8-c2505b7979e6", "value": "3072:hVfasIW5HAyR51iwbehoTOhmMqYz4UbgJ8UCrKGbvOnNHKYHuegAz1ozJJiMJsc:Df7IHmHrb0oKmMqPMgyJKiOtKYHu4z12", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745292336, "uuid": "4a7ee7a6-ec20-495a-acbc-e24df579226b", "value": 223307, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292336, "uuid": "310516ed-d39a-426a-aa26-7f55e1c6bea3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3b325b5-1f29-11f0-82df-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1745292441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745292441, "uuid": "d91034dc-f828-4aab-89c8-62fef2f8fd1f", "comment": "Malware payload (Healer)", "value": "3e73d16bf71482389e525c46ec5d197c", "object_relation": "md5", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745292441, "uuid": "fa08c462-de0b-4694-b413-5d287ca0e53c", "comment": "Malware payload (Healer)", "value": "a5ffa4c69d9f8ca65888125610493d6e78c3f4b6aac32627532bdc853923e5e4", "object_relation": "sha256", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292441, "uuid": "ffb9fe21-9893-4658-9a7f-c752b5e5d6ac", "value": "T15D8533085E9AC925E1076730104F9E4AA7B4ECFB3A7DE932F58488D7CD836D0EA970", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292441, "uuid": "b0f56ddc-6067-4925-b35b-f81926a871dc", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292441, "uuid": "1069e2ff-dceb-44d4-abf0-2876a1705a06", "value": "49152:sb1CfmT+5X7qqbSYeYSi9xNMNReDjdYt2R:CkfmC5XBbSjBiCPeDT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745292441, "uuid": "4fe28262-dfd0-4190-96c5-9f228010a32b", "value": 1748480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292441, "uuid": "d211071e-a7b2-4e84-99a1-2dfcef105c2d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9bc2445-1f29-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745292451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745292451, "uuid": "5fa98e25-a67e-4e38-8afd-d577a7f72714", "comment": "Malware payload", "value": "874dacf14f73ec0b595e41b82c25d738", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745292451, "uuid": "680dfea4-bb59-4b67-b791-ba56b2dc9f08", "comment": "Malware payload", "value": "8477766f659dbf29785bed6b2a2284f7b236d965c135ccd93c13ddf6b8bb5e23", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292451, "uuid": "159bf77a-4e20-4055-984b-980efbfaeb22", "value": "T183F3EEAAAB715EB7EC0DCE37009D4605519C925A92DE2F6FF2B4C518E38B90F49D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292451, "uuid": "e8e04b83-0f7c-4e88-badb-2d77f475e73e", "value": "1536:yM4oiHL66m+zND8028eBT/RMElALRbiXNIowsFr+XtvcXBYzvx/zF:yMemqX5vx7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745292451, "uuid": "1f62f4db-2e7e-49a4-b9b2-ffd6670069f9", "value": 162272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292451, "uuid": "ae5082a0-4fa3-4eb9-914b-a57d6f87f65a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba81ec3f-1f29-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745292453, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745292453, "uuid": "cb0c3a98-81b0-4151-867e-5d13f9d3e95a", "comment": "Malware payload (CredentialFlusher)", "value": "42ca655ae70ea7a601d88a6357c6e983", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745292453, "uuid": "392ce51a-98e1-4ebc-a202-61e2f437be6c", "comment": "Malware payload (CredentialFlusher)", "value": "7c9989c7d245c0b10914e0c0b643f45a198c902141b22b0b58ccaccf8c56e7b8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292453, "uuid": "a49df82d-16a0-4c82-9506-35b1d2df1cb3", "value": "T1D8259E027391C062FFAB92334F5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292453, "uuid": "21809d6c-ff73-4158-a021-2b9cfa013942", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292453, "uuid": "0bb40f6a-651a-4f55-9935-1e2d42f0e021", "value": "24576:wqDEvCTbMWu7rQYlBQcBiT6rprG8aLtuS:wTvC/MTQYxsWR7aLtu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745292453, "uuid": "7b914f77-e655-490f-9b99-27f0eda30e8a", "value": 971264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292453, "uuid": "7b3f7936-edc7-4816-b614-8e8dd657060a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f94b160-1f2b-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745293159, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745293159, "uuid": "6d0d6349-81e4-49cb-a2b0-6e82cb1b5d17", "comment": "Malware payload (Mirai)", "value": "ba4fedb649e1ca503c67f3c11073d6b4", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745293159, "uuid": "6bcf8f5f-1f34-4ae6-8cf6-4a8b4c56fdd9", "comment": "Malware payload (Mirai)", "value": "4bcd523481bf66984ff69c6851d2cbcb50bf08b13a77cf8e9e030ae4f3f3dcf8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745293159, "uuid": "3805768e-cf3f-4aa6-a5f5-49f91ce4765b", "value": "T17DB38444FE58936DC7E2B6FEEF5C02CE363A0798B3E679264E320A5533C972165360", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745293159, "uuid": "e816d38d-b306-43c2-9a81-357bcb8acea0", "value": "1536:Zga4QLio7sKbhzaXM9JwPTH3I/i5xYzhXIrhvvNWDtYiAZg97zF8RPCZlvSVxZ:/Li+LKMJ2rhnC+iSq3F8RqZlKVxZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745293159, "uuid": "b33892db-66e3-45b2-9cf7-0896bff6f8f0", "value": 112468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745293159, "uuid": "f3d8d296-5090-404a-8962-f40d335355d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f95e9adf-1f2c-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745293847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745293847, "uuid": "ec8ad799-f8e6-4463-aa10-cdc101942b30", "comment": "Malware payload", "value": "682a34178b272e75016da462e6ff5120", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745293847, "uuid": "9ae59689-feec-4090-a12f-d7cdc15cc005", "comment": "Malware payload", "value": "5c2585df3322440400ec4d5e7e97026b8758605085e940c3dca5424b134c93c1", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745293847, "uuid": "37fae8ab-8b0b-4f19-b85b-933a2fd0facc", "value": "T1E885236F9663D681C0680FFD01D4FE9D2F3E4EC106236E5761A1ACCF2E12DA59D624", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745293847, "uuid": "3430cfc2-a045-4723-8115-fdd7f8f12b1c", "value": "2a0371a13a19795fe9490e06d5c1a88e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745293847, "uuid": "d42a7ce5-29eb-42d1-982a-a8d0fe7598cf", "value": "24576:zXE+cr9fj3zDUy0cy/lY9ODHF3QMHRGuxmV1C3:z29L3Bm/QqHF/rI1C3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745293847, "uuid": "bb5c59ee-5c79-4590-b0a8-7c2446dff98c", "value": 1787904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745293847, "uuid": "3dcb5580-f74b-4fd6-bcf7-37fad37a5758", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02efb7c4-1f2e-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745294292, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745294292, "uuid": "a2485f47-b014-4cae-ad10-a7cc2a396d19", "comment": "Malware payload", "value": "4b0794cbf2526ebdd6b9849cf7914149", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745294292, "uuid": "8ac5f4a9-b2ae-4102-895d-305f18e8ae8a", "comment": "Malware payload", "value": "1ff0701453b1ce7f17aa18b105fbbea784334485a9a08db5b4c2033f1843af8c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745294292, "uuid": "8898b595-02ee-4db3-8958-90b748462e07", "value": "T1232633EA1FFD9CD4D9D2C9B4EC275DA81EBD65480B841128B2143CFECA6B514DB325", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745294292, "uuid": "6edae3d6-0645-4cd5-bc50-6c21c1c49487", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745294292, "uuid": "eee261a9-8709-4b9a-8abc-67d6ea8a86ad", "value": "98304:8Yy+qe6c43BSTHim9+LQntZcOq8EusNZjwZ2229pitvJqK3ZlyOaCko:8bKbJnMOq8EusNZjG222HaU4ZlPabo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745294292, "uuid": "0774f0d5-584a-400a-adf0-e7fdaa94e648", "value": 4611584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745294292, "uuid": "5d0502b8-f345-4b80-b815-596d33df25e8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a4591a8-1f2f-11f0-82df-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1745294734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745294734, "uuid": "86ad5718-dbeb-4dd1-8d63-4924cd2a4003", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "a4970e7b03d60dd50575a7a0e750b743", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745294734, "uuid": "9f73d592-0dfd-467c-a6df-4b232ac8a7c2", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "a34659297dd559a947c9f852f87445de97c2ed46c3df61b4e729477ce4106e33", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745294734, "uuid": "a059cb2b-1de6-4451-86d5-614e8fe9fa5e", "value": "T105A533DA14C40B86ECD99E3995694BAFFEBAE339B5CD15C0C65BB05C00276C2ACC44", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745294734, "uuid": "9d3f5656-9c4e-4dd2-94f7-902d062e2a21", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745294734, "uuid": "df01d5f3-95ca-4253-a490-9d9108835aa2", "value": "49152:Ou/arOFLxWJ7bq0oTTZUJ58Ko5CuCtnN09PgMkWqGCs+RxteWm0mdf4:B/oO14JnLonZUJ58Ko0SGFG1kx8O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745294734, "uuid": "7d9483d1-ad37-47bf-96fc-b359fb6bc57d", "value": 2165248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745294734, "uuid": "44563d09-61a3-41f1-85ec-930e34393bde", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e180584-1f2f-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1745294875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745294875, "uuid": "0361cab1-2c61-487a-81e1-d243c6d66674", "comment": "Malware payload (Amadey)", "value": "52faaf637f95d775cde87414969b1074", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745294875, "uuid": "cffbe42a-fd9d-4c1e-8086-c14256645f9c", "comment": "Malware payload (Amadey)", "value": "c7d9deba734a1bd671f865a828c0c84841aaedf33eef5a82fa8b01a2d243817d", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745294875, "uuid": "3bb79330-4b42-47e6-af5a-dfc4921c9824", "value": "T1A1159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745294875, "uuid": "b9008df4-ab3e-4bd6-b0a3-22110270b6fd", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745294875, "uuid": "83d9e8b1-650f-4137-a24b-f814ba50ac8f", "value": "24576:KqDEvCTbMWu7rQYlBQcBiT6rprG8aelV:KTvC/MTQYxsWR7ael", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745294875, "uuid": "a20a4cf3-14ab-4dd0-8899-89c77c65e1a2", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745294875, "uuid": "af83ac22-3a18-4047-9807-4b0d4df03546", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad0ccc82-1f30-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745295437, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745295437, "uuid": "36d708d0-dd5a-4194-9e57-f4dd7d5fa347", "comment": "Malware payload (CredentialFlusher)", "value": "89cc478e6f5ac50b41a017da4bd97c88", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745295437, "uuid": "af87fb72-54cf-4d49-bd38-05f2ed5479d2", "comment": "Malware payload (CredentialFlusher)", "value": "b55d426b8dc0ccbfb3a50ebf00ebcb2e0cb177458ac9e95373b0623cc945c39f", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745295437, "uuid": "2848d625-317a-4154-a1fa-d843163b08f1", "value": "T130A5231BA7DDD026DCB057301DF302835E36BE609578836A870ACDAD5C73AA1ED287", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745295437, "uuid": "5904f75d-a291-499c-9292-798505e89262", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745295437, "uuid": "f34a326b-a4d3-45c8-9eb9-373e24fad7bd", "value": "49152:ssIWq/e1M9SOv6ZcHAS2wCQcuIc/CnZdwjEdkrYZkpCiAMU8+Y6lU8W:g4i9b6OnCmKnzZdPYkM/v8W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745295437, "uuid": "9cb2d1dc-ab8e-4968-95c1-8f6d099201db", "value": 2178048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745295437, "uuid": "00037b22-c8b9-4889-bc9f-b34a964e8438", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7ebddf6-1f38-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745298891, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745298891, "uuid": "3bae4691-e531-455d-9a6f-50f5f23a7d04", "comment": "Malware payload", "value": "e0ba2ed93fe4e2f772899d1cff6584a2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745298891, "uuid": "c49af1a4-e2df-49a3-9cb2-25c90ff26353", "comment": "Malware payload", "value": "5ebdc3b31952e27048aa47d382d0ec8f305bc65b02ebbfec889c907e187dbb31", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745298891, "uuid": "51a8533a-8509-455e-953d-e8159d1f4db2", "value": "T14D34F18B6FCF6048D7C9638459B43238DE1A655E191A5BA26A3DC83C96470CDCA0FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745298891, "uuid": "33d0084e-5ff8-43f0-a6eb-1cd404e07f54", "value": "3072:F1SQYGb/OBXIGY5f4m38za5nwmwe3xXxpMnJqnL5PQS3maNmsLtMnbznUcuA4cbH:FtXBVfdHtwetxpUyZZSZ4c3uKxD2R+19", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745298891, "uuid": "2da3f9d5-ae23-49bd-a1db-c45ef0f29262", "value": 249929, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745298891, "uuid": "2ed1fbef-14af-4918-9f99-a63d43f3dce2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0238826-1f38-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745298985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745298985, "uuid": "29bc85b8-450f-4c54-b23d-ccb9d6819717", "comment": "Malware payload (CredentialFlusher)", "value": "3afe36e470b98fc5dce3524c79b25f49", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745298985, "uuid": "9cfc04ef-3da4-4610-8ae2-4ca606094723", "comment": "Malware payload (CredentialFlusher)", "value": "92a85dbb6a8be018972716b3f4fea50bfc8c4e7e341b607717993d006cb22526", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745298985, "uuid": "f6d586d0-5cd4-4f2d-920e-1204fd13f8ba", "value": "T142259E0273D1C062FF9B92334B5AF6515BBC69260123E61F13A81DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745298985, "uuid": "2de1d578-0b84-450e-9f51-968919579aa0", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745298985, "uuid": "7b9fdfb4-6ba1-4c3b-8a3e-73f42886ba26", "value": "24576:VqDEvCTbMWu7rQYlBQcBiT6rprG8aCSUu:VTvC/MTQYxsWR7aCSU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745298985, "uuid": "905366e1-488b-4445-ad86-1708a1f47425", "value": 969728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745298985, "uuid": "083e8def-6b0f-40d3-83b8-7a7ed3122f19", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aff1fd72-1f39-11f0-82df-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1745299307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299307, "uuid": "220be134-962b-4740-ba92-fe54a58c50a1", "comment": "Malware payload (Healer)", "value": "f30ab1e24ea1cfe91164621c7019912c", "object_relation": "md5", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299307, "uuid": "31b773b9-3721-44c0-9569-4fb47014bf6e", "comment": "Malware payload (Healer)", "value": "56738a1cc8d6310f1617d2342bd8fcb5880c0431b852bd758156b022c4370839", "object_relation": "sha256", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299307, "uuid": "05cf15c1-935e-4e4d-b131-d3026c7d80d0", "value": "T1F48533FCD0B82538C6E63A734B27B7B41620609215DBDE78C1E57D38282FF6517789", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299307, "uuid": "71016f31-e294-4d76-a7ee-61492de0cff1", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299307, "uuid": "eafd8d60-130b-416a-a6c0-d9e43a8e71c9", "value": "24576:M+QUtqcQXpOh1XjkEy+M3VSy1Ynh79zWimg5U/mA56ay7/fDkXX0aMtEPzYw0qjw:kV4hJgZFL16DXA5hkamgEZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299307, "uuid": "94efba39-d5a6-4ff6-abce-9e40db8d9050", "value": 1755648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299307, "uuid": "aa0fc1f2-de0e-4450-8247-d0000816bde9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "029a8db3-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745299446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299446, "uuid": "4b8b6d90-b4b8-4d57-a841-260b8816ea4a", "comment": "Malware payload (Gafgyt)", "value": "8af5f30414cc9c43714323a3e88dc8d8", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299446, "uuid": "242d6ba9-747f-4248-ab5c-9b048359cbbb", "comment": "Malware payload (Gafgyt)", "value": "d3ef5afdade7c52cc500165f71b00b563d06928637490c786a36a9d4106bab08", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299446, "uuid": "829ebd81-bcd1-46f6-ae79-3eb7f8265419", "value": "T15F41AEC725910BF32C90D873336954A0F9D8958AA4D99F0679DC3CE488BFDECA4406", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299446, "uuid": "47f056a5-4f5e-4708-9f3c-83a9479f5329", "value": "48:vcd8jTttQdM6YxRP7sT6OCmVI1LL1j5NmVIBx4T:vcd8jTttQdM6YxRP7sT6OCmVI5Bj5Nm5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299446, "uuid": "02f2ce32-94b8-4897-83c3-9f1d8f848aca", "value": 2111, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299446, "uuid": "48e2a429-7927-4030-b562-e9464acae3d5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8dc4d6b-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "223b1927-5645-443b-9fa8-2dfa4ff04fc5", "comment": "Malware payload (ConnectWise)", "value": "454375ee98bde8dd0553c726a31f8c76", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "8e08475a-23bc-4355-be3c-b0a1f5d8150e", "comment": "Malware payload (ConnectWise)", "value": "190da79d427a0bd4bccce3d23acd6c98988fd731da383f5d79fede7d159c76bd", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "335ba1fb-bb90-4718-abd3-81700a76237d", "value": "T10A836C43B5D18875E9720E3118B1D9B4593FBE210E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "c40d77d7-fcb4-4a3f-8d0e-635837c64f5b", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "00b604ff-7428-4094-96b1-0dc6a06f8851", "value": "1536:xoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYZ77JS:renkyfPAwiMq0RqRfbaWZJYYZxS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299507, "uuid": "e6beda3d-ab8b-45cd-9764-fd914986cfc9", "value": 83248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "41fdf84a-3909-4365-bed6-b91bdd7ca697", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85c23bde-0ada-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "4bdcc923-1f70-4b02-8828-99742bc35ad5", "comment": "Malware payload (ConnectWise)", "value": "2c883914da2e95900788fdea36e55f6a", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "fc817a5a-9e97-409d-9749-104740b63060", "comment": "Malware payload (ConnectWise)", "value": "8642a369ed977c6b3d498ca85e65f3ca9aa6f2648ca940ab0c2e6d52c3698327", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "1bd05952-5337-4929-b5bf-adf986efe7ac", "value": "T16C836B43B5D18876E9720E3118B1D9B4593F7E110E648EAF7398822E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "df98c945-7ff5-4b32-9c74-8a4f93471362", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "3e2fe3bd-0e62-49bb-aca9-209cb119293d", "value": "1536:BoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYl7HJLO:7enkyfPAwiMq0RqRfbaWZJYYlNC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299507, "uuid": "1e227f8a-07b3-4302-bc51-c4fb7de1f73b", "value": 83264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "3f1ebdce-c9de-4acb-b8dd-0dc3f65d8286", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8c4c025-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "7791815f-943b-4bfb-b59c-95132e9da028", "comment": "Malware payload (ConnectWise)", "value": "278b10953407dd3a001be910f4c70f63", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "ab49ee17-28df-4882-a20b-edb2313942a3", "comment": "Malware payload (ConnectWise)", "value": "5f3648dae551b566c3cba609ba87ac4c4c72e822ac69b2309ec58f2075e26636", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "b3c9f5c9-ad2c-4531-98b6-b28ce140d2b0", "value": "T153836C43B5D18875E9720E3118B1D9B4593F7E110E648EAF7398822E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "d80a5b02-77fa-4bf1-8247-000188810cfd", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "90c26c97-a021-42ac-920c-0bb1ae58af97", "value": "1536:RoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYl7XJCVF:LenkyfPAwiMq0RqRfbaWZJYYldCV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299507, "uuid": "d9d7920e-81f7-42fd-b2f8-e94effe6b2e2", "value": 83280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "c46efcf6-ec7e-47a1-abd6-a3c0a785c003", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fca856d3-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "7926d521-93fb-4e6a-bb7a-3a64ac7e8259", "comment": "Malware payload (ConnectWise)", "value": "47fcb65e718e83e131388b6e4e8bfc9b", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "8215f121-7c83-45e7-8999-bcd031aef19b", "comment": "Malware payload (ConnectWise)", "value": "46c04ee9adaded608a8016ca8de9d1033016bcbe260ff203123d3ea7b5f5ec1f", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "88bed9cc-aebe-47be-97f2-f4f65efc8b78", "value": "T126836B43B5D18876E9720E3118B1D9B4593F7E110E648EAF7398822E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "36e3e6e6-c9a9-453e-9ad4-d906667c8a13", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "896f39b5-ca19-4650-9943-be11ce03e4e6", "value": "1536:poG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYV7fJD5:zenkyfPAwiMq0RqRfbaWZJYYV1D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299507, "uuid": "ab3e373f-2138-4546-bd5a-64584aea3a75", "value": 83272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "d110ce04-7d42-47c2-8b80-1de80eb9a60c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcba679b-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "a7ed9623-3cdd-4d9c-93ea-79b5afad8eae", "comment": "Malware payload (ConnectWise)", "value": "1ef2aa0b79808b1ddb3c4dd752525474", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "79d65a25-98ae-47cb-b73d-d89e3c5fc12f", "comment": "Malware payload (ConnectWise)", "value": "265038db87eb64b385a38ad146bcabba5d4ec97a64dd8463b492c855e1a29203", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "58f5125b-24d1-47a5-984e-a0eb9f268e70", "value": "T109836C43B5D18876E9720E3118B1D9B4593F7E210E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "53aa5c90-923c-4771-8a3b-c4ad2f544c56", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "377f8447-1f18-4a63-8ddf-bc116492e5be", "value": "1536:xoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYl73J:renkyfPAwiMq0RqRfbaWZJYYl9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299507, "uuid": "a589f7b9-5aec-49ca-8e8b-5f07c7d627bd", "value": 83248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "4fa78709-ef2e-46a8-add4-41155686a8af", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8eb7991-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "16d9fa8b-8fa3-4ef0-bace-d20a808fda75", "comment": "Malware payload (ConnectWise)", "value": "a7a278e518bde31c954c7db4cc2d801e", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "4b3501c5-c429-421c-98dd-9441c605ba20", "comment": "Malware payload (ConnectWise)", "value": "fa651c303223b8973543b939990a4d06486c7e6e0930728f9f92c7c11c6f62e5", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "43856095-54fb-49d4-9c14-dd084da81bbd", "value": "T123836B43B5D18876E9720E3118B1D9B4593FBE210E548EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "aeb50b9c-de9e-4214-a24c-d17aaff22a07", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "c210294e-bde0-4f56-a826-b6d56d9cc344", "value": "1536:BoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYl7HJh:7enkyfPAwiMq0RqRfbaWZJYYlN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299507, "uuid": "a6daada5-a397-44ce-ba2c-e0ccefba4b29", "value": 83264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "48dbf691-3a8d-4462-87c3-b933f0656dc8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8ef7019-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "56f9183e-d2c7-4c5e-b6f0-a00fd06bac64", "comment": "Malware payload (ConnectWise)", "value": "23ef9daaf9c9230c13897b327228b95c", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "4cf03877-f963-433a-9fab-43e8b471872d", "comment": "Malware payload (ConnectWise)", "value": "25862e4ff35d2b396dd54b1d936f181defeb0946867e4a8e5e6e483410c77592", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "802cb191-e065-436c-a165-d4814b1c177c", "value": "T1A5836C43B5D18875E9720E3118B1D9B4593FBE210E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "427657d0-a497-4c5f-9408-7f53cfbdde80", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "18ffde22-3ab6-44a0-a4be-ef3d768d5dd8", "value": "1536:ZoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYp7TJR:jenkyfPAwiMq0RqRfbaWZJYYp5R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299507, "uuid": "e7fbc67a-65b8-4384-8fa2-2c02bcc4b3f7", "value": 83256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "f8fa3d63-b7e6-490a-bc41-83ef3d4647cd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbe53e77-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "29c8eb24-be0e-4b96-b512-44e9e0090013", "comment": "Malware payload (ConnectWise)", "value": "201c92de42cd5a308ee9dbea148ba89a", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "11103406-627e-44c7-b87c-0222b746ca22", "comment": "Malware payload (ConnectWise)", "value": "5afa800fa0964c5ace8502750b5df193d76bc37f875a4a20ce5362fbbf27979b", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "b7fa23f3-4627-48af-9112-780eef5fcce0", "value": "T13E836C43B5D18876E9720E3118B1D9B45A3F7E110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "a24528ef-482c-458a-b574-fd0045ca256b", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "60e618dc-71fb-4d9b-93d0-4eac9dcbe339", "value": "1536:ZoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYY17PJx+:jenkyfPAwiMq0RqRfbaWZJYY1lx+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299507, "uuid": "22a29b1c-ea67-4040-9323-4d34d5a14f17", "value": 83256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "458b9e79-a74d-4154-92f5-7a4cfb988e65", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcfc9f97-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "0d45ee6f-7f55-4970-8d09-3d7703e6985c", "comment": "Malware payload (ConnectWise)", "value": "bc3d0f6963c6aba6871ea8bc327bbfb2", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "b02e5c50-25d7-496c-9d21-53b700785ac4", "comment": "Malware payload (ConnectWise)", "value": "67f869a318bdef07943a8a958ef55d3cc4668bf847b2a44d84b2fbc9dbc66ceb", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "d2828acc-100c-4a05-8632-ef984aeffab6", "value": "T12C836C43B5D18876E9720E3118B1D9B4593FBE110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "72bbf171-b814-41be-9291-a11769ea197d", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "f0556b60-b3f5-449d-a3d5-1b7330293b65", "value": "1536:BoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYY57LJ5R:7enkyfPAwiMq0RqRfbaWZJYY5h5R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299507, "uuid": "429c0e3e-b086-4660-b23c-932b36f002ca", "value": 83264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "11d2e88e-12e7-4a3d-9cfa-2942342e9070", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8f2e8a7-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "a0c36422-f793-4b94-af87-3619274e7cb8", "comment": "Malware payload (ConnectWise)", "value": "83f3f58a873947acf4028c2d4680d525", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "c8d6ba6c-9b40-4bf5-a8aa-5132fb104ff5", "comment": "Malware payload (ConnectWise)", "value": "4c158067e0d27d345221af9e8023a4d5a6edb40f9941760bccd3e004345c9866", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "6e33eb78-8401-4f80-8497-fb5d84fc1583", "value": "T13B836C43B5D18875E9720E3118B1D9B4593F7E210E648EAF7398822E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "140abc65-c166-4bfb-b899-7678c25b4477", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "0da0f1f4-2576-4aa9-b9c7-5983815d2a56", "value": "1536:hoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYY57rJj:benkyfPAwiMq0RqRfbaWZJYY5Bj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299507, "uuid": "6c6f8491-8bd7-4e94-94f6-bccd6a21a48f", "value": 83232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "768f62dc-8cd5-427c-876b-f9f896cb33c2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50dfc85c-1e74-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745299507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "d44f0926-240e-4385-b957-ff72040da138", "comment": "Malware payload (Gafgyt)", "value": "a374f6c306be3429aa9a66e07782ef3a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "96f7bbe1-08e1-44d7-82c4-89ac0835f2ac", "comment": "Malware payload (Gafgyt)", "value": "c136879b9ba89990a59b154545e253810c961a07a697e2fd844dfaf097999f84", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "39efbe3d-500d-4e8c-8247-c64dfeeaa680", "value": "T159C3842E7E12BFBEE668823107F35F70879521D227A19386F26CD6181E7128D1C5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "6395271c-fc0d-4ee9-ae85-69816b958e8e", "value": "1536:B7jO1T92q+fEAf2rK7AeMehenezF2rK74e5OyYELcQqbHfnbeOhwmeE6rmW+IFBR:cjgrhYAq/n/hWE6rmW+IFB1Dt1hR/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299507, "uuid": "6a110dfb-d150-43bf-a549-fb68b590b7d2", "value": 126010, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "ca073bff-f18b-49ab-babe-e5f8bc385a86", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a3e36a-19db-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "3fa0c0a1-4b4c-41c8-80dd-b0a73a921ff2", "comment": "Malware payload (ConnectWise)", "value": "21a93e356bd0882b9871045a7ab1c313", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "658075c6-93af-48e1-a170-10f5b15a03aa", "comment": "Malware payload (ConnectWise)", "value": "a745748191766c8a64a35c30326381a41746289726b6b1d750d5593d1b896ffe", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "59ae4afa-a100-4bd3-9d61-d9cf7cca00a9", "value": "T135646D11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "5f953ec1-ff41-4f4e-8118-246776ffdda3", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "116bdace-3537-4e52-b513-01015d178ad3", "value": "6144:PmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFii9:W1iw7gryNkSV1hy1Z1u2JLT9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299507, "uuid": "b54637a3-3d89-435d-a8c6-c9d4ac6e37c1", "value": 312640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "6786badf-a965-47fb-bd73-e982f6736517", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2b0ac4b-19db-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "6eb62798-16da-4460-ab3c-39676c3a7970", "comment": "Malware payload (ConnectWise)", "value": "a2a122969aa7b31cb5377d6c8a4ce516", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "21cd3f90-070e-419e-b5a6-a56ca5af1572", "comment": "Malware payload (ConnectWise)", "value": "dcbe296c187f30b52cddb690b2c021d9cb37961c9378e1423d3a4774324b1d33", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "d0eb0816-63dc-4c45-a3d1-f0c1bedaa0c1", "value": "T15F646D11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "45c67ce3-d46d-4d61-9f3e-fcdd4c296656", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "a77bc614-9cab-46f5-a9e0-69a6d9ddcdc9", "value": "6144:PmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFii9:W1iw7gryNkSV1hy1Z1u2JLT9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299507, "uuid": "410d86a7-b5c4-4d2f-8dad-7d00003d7758", "value": 312640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "06f8e9e6-93a5-42d7-85f6-9ea57300fe9e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f917a2e2-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "330a28cb-ad65-44c3-98fd-5510a4ae4217", "comment": "Malware payload (ConnectWise)", "value": "cea42dcdf8b763531d2242dac6ec19aa", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "f410fc8a-8913-4be2-a4c7-2c60a3b61075", "comment": "Malware payload (ConnectWise)", "value": "bc80778a5536dbdf2a8a2e0787f73ce73ddc2ba9a8223baa931bfbba9725c2f2", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "f3364069-f304-49ac-a489-850b48de22e5", "value": "T110835B53B5E18475E9720E3118B1D9B4993FBE110E648EAB3398423E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "dc9f358d-396b-4160-9a62-ff87c3e36dff", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "4d89b654-edda-4def-8741-45d6c5be6d71", "value": "1536:ToFsMHqzISrGqx0WiwbqKHxfd6dldV0OCJRpsWr6cdYV7hsYYYb7sT:y9q8tC0C+axfdalBqRfbYRGYYYbA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299507, "uuid": "1e32322b-18cb-413d-996d-7815ab5d53f8", "value": 84256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "cd37ed85-2e0b-40ca-bbcf-706a9f6d0f75", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc02acbf-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "f12b6998-f15b-45bc-b778-34f1c4f803b4", "comment": "Malware payload (ConnectWise)", "value": "fb9d7c5008041744661d8697d27c6d06", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "42fc4657-b4d8-430f-83c3-3c0d68d06381", "comment": "Malware payload (ConnectWise)", "value": "5fee4c90591d30b413827e22565b0045740596bc4fdfc07912ff3eb742a9acd9", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "92be4963-3e3d-4a6b-87a8-8444a7dcbaac", "value": "T103835B43B5D18476E9720E3118B1D9B4593FBE110EA48EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "c44531c8-d8e7-4c98-b5eb-16d3e95d3178", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "52fe375c-0e3c-4c72-82a0-b804ef6a8bd0", "value": "1536:xoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYZ77JO:renkyfPAwiMq0RqRfbaWZJYYZxO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299507, "uuid": "e124af18-5703-4e10-bb55-28751fcc7a12", "value": 83248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "d4679b43-cab3-4e8d-8565-aa17b3e56548", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0cfee13-19db-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299508, "uuid": "38a141c4-63eb-4680-ac35-2ab0e62263b1", "comment": "Malware payload (ConnectWise)", "value": "98c89c47c57ce14220849e805ed667f5", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299508, "uuid": "08429cfc-62de-40a0-ad2b-f9bc32d0feb8", "comment": "Malware payload (ConnectWise)", "value": "554e675da3820a7794acc2bbfdb250d024e42e7b7ec55d579ac5ed692e133efb", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "d40ea5a0-99c1-4634-96d2-28db17a114ff", "value": "T197646C11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "1c9e0c42-08da-444d-9d86-4208765ba91f", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "a791269d-b115-4d59-9875-227e72546385", "value": "6144:3mlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFii9N:O1iw7gryNkSV1hy1Z1u2JLT9N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299508, "uuid": "69dc0751-81f2-48c1-af60-3b348ce66437", "value": 312632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "13cebab6-f311-4d91-8927-de25e4d0444e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8b79341-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299508, "uuid": "0ca22b06-1f68-4ac6-9140-084e79518b4f", "comment": "Malware payload (ConnectWise)", "value": "6d4f9144cae378de508eb6d86c543121", "object_relation": "md5", "Tag": [ { "name": " screenconnect", "colour": "#230f37", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299508, "uuid": "a8de6846-cca3-499a-8f9a-db04f0db6b21", "comment": "Malware payload (ConnectWise)", "value": "c5d55881eee5dd4c313a780f82e66ecc1c4746af521ff97e106cb5d905f43cf5", "object_relation": "sha256", "Tag": [ { "name": " screenconnect", "colour": "#230f37", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "1cc3bf88-a464-4313-ad68-a22702d556ff", "value": "T126836C43B5D18876E9720E3118B1D9B4593FBE110E648EAF3398426E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "08ea4ce5-7175-4ca5-9b57-af372f177afc", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "85103367-02e8-47e9-a651-e20eb1c563b1", "value": "1536:xoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYZ77JHG:renkyfPAwiMq0RqRfbaWZJYYZxHG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299508, "uuid": "23b575cd-52cc-42dd-9daf-00406428997a", "value": 83248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "6285ad5c-2ba2-44ba-a178-644e6f7aa1d4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27b9d786-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299508, "uuid": "9a2d4b35-91c8-40af-ac1f-2c74ce8a242e", "comment": "Malware payload (ConnectWise)", "value": "5eaaee2c97d6ab624375aa99e045d10a", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299508, "uuid": "7fe93189-6518-4644-968a-93a8c8188846", "comment": "Malware payload (ConnectWise)", "value": "4ba4b31a9467b97a12646e86e80e1b79ca09806c31fc71556830051a77116c5d", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "afe79d6e-8d55-42b2-b888-a1b95af8195c", "value": "T1C7836B43B5D18876E9720E3118B1D9B4593F7E110E648EAF7398822E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "ada67a93-757a-4bee-9e79-11d360e3e3b6", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "66eedf7e-e52c-4f38-811c-b9a90d58f2a8", "value": "1536:hoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYa7nJjO:benkyfPAwiMq0RqRfbaWZJYYatK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299508, "uuid": "08118770-4d5c-4344-9a9b-728134f843ab", "value": 83232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "d5d3174b-6398-4af1-8825-05ceeb26880c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27de9744-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299508, "uuid": "1b06e5d3-9810-4fbd-848c-6b8a9d27c89d", "comment": "Malware payload (ConnectWise)", "value": "2280a36a2836964f25b88021b98ae048", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299508, "uuid": "daf4723b-a706-48bc-80a9-1ab262db2020", "comment": "Malware payload (ConnectWise)", "value": "8ae83ae4fd456188e78ed8ce671ebe410c0e17aba46806f6ae00c66174985d9a", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "7e37dde5-803f-4e66-96e3-1406521f076b", "value": "T17B836C43B5D18875E9720E3118B1D9B4593FBE210E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "58397677-99ac-4eb3-af63-1427ff8f6439", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "160aef85-b65c-447f-b7cd-3d70e1517204", "value": "1536:5oG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYJ7vJ:DenkyfPAwiMq0RqRfbaWZJYYJF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299508, "uuid": "4e87ec94-0e8c-4213-88b5-6c391c55fed4", "value": 83224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "e686b2fe-7982-4453-99aa-962d0f27907b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "280a68c1-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299508, "uuid": "2127d9ff-0ca9-4e8e-bdea-7cca7c6b22ab", "comment": "Malware payload (ConnectWise)", "value": "13dfae34f87f6df53023c9c79506094e", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299508, "uuid": "6a8d0594-73f1-45d5-9f5f-9a4dff4e743a", "comment": "Malware payload (ConnectWise)", "value": "e392340b94366d0d2c98facc7a3230520b612e8600e76fe4fd43542cf3a949ac", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "84fd3b73-47fd-40ed-bfea-5fc763cb83cc", "value": "T1BC836B43B5D18875E9720E3118B1D9B4593FBE110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "147d0445-f659-4468-b141-0517cb11762f", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "bbe286f4-6d9a-4e40-9996-79a76bc90598", "value": "1536:JoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYV7/J:TenkyfPAwiMq0RqRfbaWZJYYVV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299508, "uuid": "81f1fc91-cc41-46de-88ff-b798e84a344f", "value": 83240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "429cd132-b28b-4863-940b-db75957b4be4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28360c45-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299509, "uuid": "7864499d-f2de-4c0d-833e-034ad0e27839", "comment": "Malware payload (ConnectWise)", "value": "78d47d07a407ac5eb4493a45c7af1c79", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299509, "uuid": "9f96d42e-68de-4499-88bd-b34a2628b502", "comment": "Malware payload (ConnectWise)", "value": "b8bafee0ab0091e8e3cf63c975ffec7352e34538079219f892d186d6c84d3451", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299509, "uuid": "11204e37-4d04-499f-a0a8-ce0f94de151a", "value": "T1D9835B43B5D18875E9720E3118B1D9B4593FBE110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299509, "uuid": "cf0030c6-5484-4c84-b8c4-b460729ebb95", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299509, "uuid": "d665c4fd-b8aa-43e5-bf3d-508f8006d0b5", "value": "1536:JoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYp7DJAISG:TenkyfPAwiMq0RqRfbaWZJYYpJAIz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299509, "uuid": "34ec6ee8-5907-4292-9800-3cb4ebc98c80", "value": 83240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299509, "uuid": "f412736d-d808-4817-993e-43321699b109", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2863f0ca-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299509, "uuid": "902e59a9-aacd-4762-a45e-7b7189ba4edc", "comment": "Malware payload (ConnectWise)", "value": "24f98162ded74584ef27cd6d79a1eba3", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299509, "uuid": "4a4708ff-158e-412e-8216-98d8d9a5674b", "comment": "Malware payload (ConnectWise)", "value": "77a43107c26ca85d94bd1454c3d2127972fc7314afdc4044af6527832dffbc21", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299509, "uuid": "bedfb0b8-bdf8-493d-9552-f441a2450d91", "value": "T1D8836C43B5D18875E9720E3118B1D9B4593FBE110E648EAF7398822E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299509, "uuid": "ef70dee9-d84f-4641-b0db-d17fa25d16d5", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299509, "uuid": "f6c0fb8c-aa28-47b8-bc66-02aba5d337f7", "value": "1536:JoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYV7/Jd:TenkyfPAwiMq0RqRfbaWZJYYVVd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299509, "uuid": "4f2dc5d9-a0ea-40c6-b129-adbf7455f549", "value": 83240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299509, "uuid": "7c4730f3-b697-4c82-baa8-811ee16dd876", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f98368e4-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299509, "uuid": "830c5275-ec70-4609-8532-112a1526a528", "comment": "Malware payload (ConnectWise)", "value": "6d5cc3c76afa74b53b026b28c863e045", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299509, "uuid": "6d053752-eef7-46e6-9314-bbedc7f9ae3c", "comment": "Malware payload (ConnectWise)", "value": "8e52cb774c57ece0416c4c6ea6fb22545dd5fd0e01305c5bfb31eaa2d466c8eb", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299509, "uuid": "22c32762-3998-4bb7-833a-d75d02183c00", "value": "T112836C43B5D18476E9720E3118B1D9B4593FBE110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299509, "uuid": "587ed62d-b961-415c-bb45-3355318cc569", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299509, "uuid": "f4a6a54a-5cfd-4d55-b35d-6bca7afd46b0", "value": "1536:ZoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYY17PJ:jenkyfPAwiMq0RqRfbaWZJYY1l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299509, "uuid": "f86ff74e-689d-4ee6-8274-c2f81de01b48", "value": 83256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299509, "uuid": "8f2a7fdb-1758-45dc-bbac-60af6dd1b069", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8e06c5c-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299510, "uuid": "277e1e86-0804-4318-90b8-b5a842eaa7dd", "comment": "Malware payload (ConnectWise)", "value": "8140268fa2a3880134d97f4c8e85cea7", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299510, "uuid": "c70a47a2-1f4e-481e-8049-e8f0c4a92da3", "comment": "Malware payload (ConnectWise)", "value": "38d759b0e2af2c9f24d0e9797a1e3ba8601869db529d75d753df4b539389d389", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "4326acbc-78f7-41a3-94a7-005eb4d842f9", "value": "T1EE835B53B5E18476E9720E3118B1D9B4593FBE110E648EAB3398423E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "9c7bdaab-ead9-4e25-b4aa-c031fe0ab2e8", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "85752e1a-b277-4910-b851-c44f01afff13", "value": "1536:joFsMHqzISrGqx0WiwbqKHxfd6dldV0OCJRpsWr6cdYV7hsYYYc7c:C9q8tC0C+axfdalBqRfbYRGYYYc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299510, "uuid": "87f5381a-ae71-4341-b87f-55da13d385b1", "value": 84272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "0f471a6f-954e-47db-96fd-56440f0e2622", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8d93ec2-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299510, "uuid": "8c1f3fce-e3cf-4718-8ceb-9f700a0fbda8", "comment": "Malware payload (ConnectWise)", "value": "8df0d38c601139b490bb84bbef2a7581", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299510, "uuid": "40d2ed21-d307-4c9c-84fb-5db07148e55b", "comment": "Malware payload (ConnectWise)", "value": "a0d1d7953ad09b9e974a8b4860255f02d15f24d4c9e1c002ae92db575773c893", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "a24337ec-b1d5-4c49-acbe-edf75ace640b", "value": "T157835B53B5E18476E9720E3118B1D9B4593FBE110E648EAB3398423E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "233d8dd9-20b4-4674-8a57-770488e237f7", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "bb7c919f-baab-4433-bc1e-e11256459008", "value": "1536:boFsMHqzISrGqx0WiwbqKHxfd6dldV0OCJRpsWr6cdYV7hsYYYo7AuB:69q8tC0C+axfdalBqRfbYRGYYYo1B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299510, "uuid": "af60fba1-3794-4a97-80a1-eda85a6d8969", "value": 84280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "6f703c89-df01-45d3-8143-741f4d79ad51", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f92ac2ee-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299510, "uuid": "2d7a321b-1ab0-4883-a56c-d1cf8fed078e", "comment": "Malware payload (ConnectWise)", "value": "ac2d74a2599a8b99a697fbccac0579c7", "object_relation": "md5", "Tag": [ { "name": " screenconnect", "colour": "#230f37", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299510, "uuid": "409531f5-d43a-4097-87e1-5b833ba53522", "comment": "Malware payload (ConnectWise)", "value": "f5259c4f7b5606fd07af324d74dbb0e536f66d86cb79eee995985a5fa56b710b", "object_relation": "sha256", "Tag": [ { "name": " screenconnect", "colour": "#230f37", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "7f66948a-c5a7-4c71-bacb-f1307b294afd", "value": "T1A2836B43B5D18876E9720E3118B1D9B4593F7E110E648EAF7398822E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "1de28d43-1fcf-4c50-8217-25cea6787a59", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "f7a8ef6d-b63c-4656-90ec-f89c059fe79a", "value": "1536:poG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYp7jJWa:zenkyfPAwiMq0RqRfbaWZJYYppWa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299510, "uuid": "01c0cd60-4b95-491b-9b1d-85ac1dc7a58b", "value": 83272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "b57068f2-5bae-45e8-a86e-2c143e34d9cb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fccd514d-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299510, "uuid": "f8e26c9f-cdd3-47f6-917b-c4088e134c97", "comment": "Malware payload (ConnectWise)", "value": "416da66367d5b32fc060336e762ac8f0", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299510, "uuid": "e7a67349-7e83-414c-bfb2-d34b350509d6", "comment": "Malware payload (ConnectWise)", "value": "da07470e129c5591628c4a59e82dbc5d2c51d2b273aa9b6924068dcd576d25e8", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "971e3016-a086-496e-9110-26cf4b370fb9", "value": "T1E8051901BBA05018FDF716FA85FE7068993DBAE01714E0C752C41AED9625AF0BD36B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "61da7e2d-eb20-4a31-8b9d-640680e98b6e", "value": "cfeaf9172bc0441ae75aa0bed85df218", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "b113c091-7641-4475-a9a9-ed7abf154d7e", "value": "12288:UhRPuvoarC2wPDiisuutU4GwP1PdS8eSlsIRu55b+MGJF:62voarC2wIGwP1Pd51ljt7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299510, "uuid": "6e0c9e49-47c1-49fd-b54f-9018e991834d", "value": 826688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "8f4fefd9-27c6-409d-87b2-30ff8ac74ea8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2913477c-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299510, "uuid": "f3ff3a0f-c703-4994-830c-fc652eb69340", "comment": "Malware payload (ConnectWise)", "value": "c00d8b30bec546c39af7a593167c08dc", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299510, "uuid": "5284fb42-5fc6-4b27-892e-ac17cb00929f", "comment": "Malware payload (ConnectWise)", "value": "89948fad8499fd9388d70c9ff97e0645441641dae40820ce37645015b39b9fb5", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "9f60af5c-4e43-40e9-ab2c-dfb4f109046b", "value": "T189836C43B5D18476E9720E3118B1D9B45A3FBE110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "e812c032-2c9a-47cc-8e76-6c0fddd410be", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "06c90fe4-8bc5-4b57-8bdc-1298e82670a3", "value": "1536:poG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYs7jJo:zenkyfPAwiMq0RqRfbaWZJYYspo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299510, "uuid": "d2274b7a-e937-4f66-9748-49149e0d2922", "value": 83208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "f399bfdb-5baf-4404-82d2-2068dc4d8734", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcc9c13d-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299510, "uuid": "d03ea3d8-f728-4bc3-979d-05b75080c15a", "comment": "Malware payload (ConnectWise)", "value": "a21e714ff80b3459614819e52db95344", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299510, "uuid": "c6ca5fde-0198-4106-8637-f77c0ba81624", "comment": "Malware payload (ConnectWise)", "value": "fd9b0ed7d5e670614db8fc38097c2785205d07db001262a79f805972d5ea7268", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "ecff9947-52c0-44e3-b7a0-7019832acbe0", "value": "T1ED835B53B5E18475E9720E3118B1D9B4993FBE110E648EAB3398423E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "1ad6f84c-8868-4b26-8951-d193df54843c", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "52d0403d-e582-4411-b2cf-1faee55b3487", "value": "1536:LoFsMHqzISrGqx0WiwbqKHxfd6dldV0OCJRpsWr6cdYV7hsYYYI7wMX:q9q8tC0C+axfdalBqRfbYRGYYYIpX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299510, "uuid": "0e0ff6ea-4242-4263-adaf-b649d48a9fe4", "value": 84264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299510, "uuid": "e6a4381a-fd32-45f4-98ca-3b2803ae9120", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "296f38a2-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "6c94b4e5-173c-4076-8bd6-afc0477cfba4", "comment": "Malware payload (ConnectWise)", "value": "2c95f8a69b41cff188f6ecedc30eadf5", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "da235e9b-14cd-47c1-80ea-33f86e8ddfa2", "comment": "Malware payload (ConnectWise)", "value": "de873a8a63ad322919e6479215640eb6380b7bf0fb224e2d4ed38021c5a93361", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "7f2f23b7-c026-4ce6-b173-8e465498229a", "value": "T117836C43B5D18876E9720E3118B1D9B4593FBD110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "99c16104-f426-4d8e-a1bc-5f1f2352ca05", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "da43ecb8-1518-47f6-8820-476a95de61ec", "value": "1536:RoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYA7XJ:LenkyfPAwiMq0RqRfbaWZJYYAd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299511, "uuid": "d1c344c8-eb2a-4a3d-9e10-ed9274d4e224", "value": 83216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "d4ea8bf3-a5ef-4805-bdd2-d57c43acbd56", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc7b9754-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "a5a29d18-46d3-4f4e-aa2d-c3366517db45", "comment": "Malware payload (ConnectWise)", "value": "9fe3bc91f74b26b52206e940e6bfd0c0", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "3b90837e-a6f5-4e4a-b838-1d9501f436b5", "comment": "Malware payload (ConnectWise)", "value": "88f3b9372b5b7457728ace6463e98d16f6dd81e978e8d50ec3014cf033a98cc3", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "d80d0516-6e77-4f02-8ce7-0b20831bd111", "value": "T179836C43B5D18875E9720E3118B1D9B4593FBE210E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "9621c53d-8dc5-422c-b9c2-ed00ae20af3b", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "feecfd4b-bf29-4348-8d4a-f69bcb248e87", "value": "1536:xoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYZ77JX:renkyfPAwiMq0RqRfbaWZJYYZxX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299511, "uuid": "8d23dd13-7e68-4d9f-b932-3545d4f3a38d", "value": 83248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "9ccb1bee-17bb-41be-9551-c5fe026af01e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8dcb269-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "7ba1658d-25fb-4855-882c-02059f390a2c", "comment": "Malware payload (ConnectWise)", "value": "1602e0b4c6d9a3178a80015a35f10e25", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "21056fa5-6010-4c05-9132-4aa94924d3dd", "comment": "Malware payload (ConnectWise)", "value": "d90e75aad72d1410372801251ff4722542272d29c9ab12bdaf40cdb9c5dd8da3", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "da1aee06-c9cd-4b72-b4e7-fe8290123b40", "value": "T181836B43B5D18875E9720E3118B1D9B4593FBE110E648EAF3398826E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "d0a922ad-ee6c-40cb-9dbf-d298619afd89", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "9df1c274-7e47-4880-9a2c-5759efb894b0", "value": "1536:BoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYY57LJa:7enkyfPAwiMq0RqRfbaWZJYY5ha", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299511, "uuid": "ac40e48f-a130-4c69-852f-3cb64d4430fb", "value": 83264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "5684d326-168f-412c-a0ea-4501a0cea27e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2aae9a3-19db-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "11430b74-308a-4422-abc9-b18beefd6b65", "comment": "Malware payload (ConnectWise)", "value": "1b7f3f5f691cdaa532d23137c9aff1ca", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "fakeapp", "colour": "#9e96a1", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "07220eda-ed75-4ac8-9584-c3aa924dc2c0", "comment": "Malware payload (ConnectWise)", "value": "cb33552d8aa7df47730038674f14df936bd5744c45990b79473ef5391529d66c", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "fakeapp", "colour": "#9e96a1", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "10efc90f-ef9c-4244-a5e7-6c20715f5912", "value": "T17C646D11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "b76466c5-700b-424b-bc39-8bf34cd3ef79", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "64e5736c-99a8-4b22-b27d-08b51287d9ae", "value": "6144:PmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFii9p:W1iw7gryNkSV1hy1Z1u2JLT9p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299511, "uuid": "1cdb4ca8-67cd-439d-9f51-d9a0838aa415", "value": 312640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "91f67d57-617e-46aa-9061-5bf87d5a068e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fca5d63d-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "3fafd3d8-91f1-49c3-8680-dbe6d7808ff8", "comment": "Malware payload (ConnectWise)", "value": "c218c692d55732c7d534446b0744ab1a", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "c077b76a-446f-4626-bc7a-be6c09f0ec04", "comment": "Malware payload (ConnectWise)", "value": "7465441ea732da89653f588f1e112f38b5f75cd5f8e099c9b543d535cdcf4039", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "55f6b0f5-b4ab-4416-ac81-ab9d9f840e72", "value": "T11F834B53B5E18475E9720E3118B1D9B4993FBE110E648EAB3398423E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "dd3cd58c-e4eb-4bfb-92d9-d06563cea92d", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "68162999-d9dc-4eac-aaab-32933f1a32b0", "value": "1536:ToFsMHqzISrGqx0WiwbqKHxfd6dldV0OCJRpsWr6cdYV7hsYYY47YX:y9q8tC0C+axfdalBqRfbYRGYYY4i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299511, "uuid": "0b8a0171-12fa-4934-af96-21aff469b6f6", "value": 84256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "db32ef74-264c-499a-bdd7-bc849a326574", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29a62840-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745299511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "0652d193-9033-49ba-9737-ac677f9c4600", "comment": "Malware payload", "value": "97029e21592317e14ace603c306010e9", "object_relation": "md5", "Tag": [ { "name": "Badur", "colour": "#f1b8c2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "542f99eb-d16a-4cc5-ba66-aa648235b8a3", "comment": "Malware payload", "value": "3da4ebcd982eb86dcb5f5fe76311d7ddf85110706b0c64b9a22336c96ee160c8", "object_relation": "sha256", "Tag": [ { "name": "Badur", "colour": "#f1b8c2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "7139e262-3d89-47b5-b8f8-ae7b3bd12e14", "value": "T1B77412488835CC85EDE78A315239FFD3363B70E9C1E352A2F63906BC2F4BE4265196", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "fbd41498-b6b9-486d-b345-9bee0a5bc6bc", "value": "6144:Y1ZclxHAKdj68ZevFvgepdA6yCM/Huawdxln5zUuQQORa2z0Md:sZczHZdjkvLpdFynHnwzt5aA2t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299511, "uuid": "a57f3bde-cc21-45ac-9b02-f4192e875cd8", "value": 345619, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "d6111951-a483-4745-9066-a6725be5f811", "value": "application/pdf", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb6f7d72-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "ce4b4e63-6442-44c0-8670-cb8f38a47de5", "comment": "Malware payload (ConnectWise)", "value": "01bb67d32fbf67872def4253bf7ff349", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "a374673b-82c3-4561-b6bf-0b8b5c9b581c", "comment": "Malware payload (ConnectWise)", "value": "87b7b225d07a97ebdb5f2d71ace405c25c9950c1917e0c4c8304aec256a19bc0", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "fa564a10-da59-4048-9f60-1526e71c20af", "value": "T169835B53B5E18475E9720E3118B1D9B4993FBE110E648EAB3398423E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "f0afa0a9-a719-4dcc-a7df-7f21e2f1e54b", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "4714dac2-b410-4bf7-b521-368d59891603", "value": "1536:ToFsMHqzISrGqx0WiwbqKHxfd6dldV0OCJRpsWr6cdYV7hsYYY47YK:y9q8tC0C+axfdalBqRfbYRGYYY4f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299511, "uuid": "4d90a03a-e4a2-406a-b564-d6cdb011e5ce", "value": 84256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299511, "uuid": "d9efa21e-7345-41d1-8abc-b8d467be3bea", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcf40212-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299512, "uuid": "a7aeebb2-16d2-43ee-965d-a23c882e4a2c", "comment": "Malware payload (ConnectWise)", "value": "3df14a804b7167d8d984d9fb2386247c", "object_relation": "md5", "Tag": [ { "name": " screenconnect", "colour": "#230f37", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299512, "uuid": "9125a94d-49b9-4d4f-b793-b83dc4d262ca", "comment": "Malware payload (ConnectWise)", "value": "577c75d0d2584b8139663d1e39f52cc5c8085b64c0b9d5a28301c079428f8914", "object_relation": "sha256", "Tag": [ { "name": " screenconnect", "colour": "#230f37", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299512, "uuid": "d283d185-e388-4134-ab12-d9880d0a5c39", "value": "T1DF836C43B5D18876E9720E3118B1D9B4593FBE110E648EAF3398426E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299512, "uuid": "72ec330b-f16a-476a-8b59-34b48f65fb12", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299512, "uuid": "48eb1ff2-e323-452e-b01a-d3792dde10d4", "value": "1536:BoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYY57LJNx:7enkyfPAwiMq0RqRfbaWZJYY5hj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299512, "uuid": "82f29a9d-4b6a-460c-8c9f-e5d39e412943", "value": 83264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299512, "uuid": "0b9c6428-250e-4578-b09e-76c1cfd84366", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc929a2c-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299566, "uuid": "8a6d27ce-3f1e-4d27-bbf3-52a6910ad6c3", "comment": "Malware payload (ConnectWise)", "value": "c8f7b492e291b42858accf97a0e124b1", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299566, "uuid": "030f30bc-74d2-49d4-b70b-82cc6ea2d6ef", "comment": "Malware payload (ConnectWise)", "value": "26726127ed6c74a273a65ae7bd40f125673ccec67ca12ee95aabe93f05c6e8ce", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299566, "uuid": "af2a920e-b934-4d06-8a0b-bc5ee77ecacd", "value": "T1D4835B53B5E18476E9720E3118B1D9B4593FBE110E648EAB3398423E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299566, "uuid": "86cd4b42-2870-45cf-adeb-a43289d8130c", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299566, "uuid": "2da687ad-b3fe-4f05-a1fc-74c192ede1f6", "value": "1536:ToFsMHqzISrGqx0WiwbqKHxfd6dldV0OCJRpsWr6cdYV7hsYYY47YB9:y9q8tC0C+axfdalBqRfbYRGYYY4E9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299566, "uuid": "84f9e564-eb63-4e1c-b2af-898dfccfc5fa", "value": 84256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299566, "uuid": "b952cb4c-5007-4bef-a4b0-22cbacfcaf16", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "948ae8f7-1aaf-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299566, "uuid": "aa123d76-4027-4e30-a9c9-086e1eece781", "comment": "Malware payload (ConnectWise)", "value": "e88b13b5c38aa804d3c6abcb5a479855", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299566, "uuid": "262b91dd-89a6-456b-860a-9c1072fbfaeb", "comment": "Malware payload (ConnectWise)", "value": "e7c004134a9e3e137248481b2bdd9ece2778159e5936474ea0d031ee060cdca4", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299566, "uuid": "e419e12d-6012-4dce-98bd-50dd6c9e6eb8", "value": "T145646D11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299566, "uuid": "a23e3ce7-d570-4ac7-927a-89af71b54de3", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299566, "uuid": "5c655b29-5180-43df-a6c3-b3642bca5975", "value": "6144:XmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFii9J:u1iw7gryNkSV1hy1Z1u2JLT9J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299566, "uuid": "f93aad22-5d81-497b-b137-0d250e3141d2", "value": 312600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299566, "uuid": "d7a77c40-1cbe-4352-9679-1c4839fcc46f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9487c6e9-1aaf-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299566, "uuid": "1d1dfe5e-edbd-4d09-b67c-560c1b481543", "comment": "Malware payload (ConnectWise)", "value": "b0ed6f2f4d6d4281ff4448003a3d33dc", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299566, "uuid": "d6f3e74c-96a9-47c0-ace2-bcae7bfaf86e", "comment": "Malware payload (ConnectWise)", "value": "cc2180167046bcd3a1fbd846b76235a9f02844d92bd439aaae13280fc4d29351", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299566, "uuid": "f371b74d-66c2-451f-b50f-d6a300bbdc99", "value": "T13D646D11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299566, "uuid": "c059c4e6-1ea3-4256-9f1a-6691255f8956", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299566, "uuid": "e78be683-6e0e-44f5-898e-c76fb6a293f6", "value": "6144:XmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFii9:u1iw7gryNkSV1hy1Z1u2JLT9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299566, "uuid": "8e14ee10-5275-4dc4-bd25-343e8d4ea4c9", "value": 312600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299566, "uuid": "2427ca8b-4670-4198-8b88-9cacdd289b82", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1787c27-19db-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "0649b6c3-0402-4e43-a565-b6416070b3ab", "comment": "Malware payload (ConnectWise)", "value": "e7d98bcd86875697cd2747a39161fb30", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "892858f4-3f02-4d13-987d-ea3284f86a2e", "comment": "Malware payload (ConnectWise)", "value": "885697bf6c80ec4d4a1ceb820ebc0f23595588978b7b99f5d09a15888c39e5f5", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "8563c78e-c505-4bf4-b750-875904ee152d", "value": "T1ED646D11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "2feabac1-e5e3-4d35-87a4-a9beaacc2729", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "057b1541-5a29-41af-abe9-244ae91330b5", "value": "6144:nmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFii9:e1iw7gryNkSV1hy1Z1u2JLT9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299567, "uuid": "284cf574-dfd3-441f-9a84-74bfac111525", "value": 312648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "a1c23504-ce0d-4898-b839-c9be3a18e391", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4adcb3bd-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "fd4cacef-da19-4d9e-bf84-f0a8d85559ba", "comment": "Malware payload (ConnectWise)", "value": "fbf4ee9430be28bcff989fd6fee71843", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "555f97df-773f-4e6b-9e96-2c85f0c58d4d", "comment": "Malware payload (ConnectWise)", "value": "126fae4421bdeb98bab74edc678edeed90bc43aad29f68ac607c0860fa2aac0b", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "04e9a45d-ad37-40e4-a116-b1978cb03efb", "value": "T13F835B53B5E18475E9720E3118B1D9B4593FBE110E648EAB3398423E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "213c7454-e70e-4511-8e80-a8bf652ae333", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "67107819-e5fa-4359-a5e0-6779d1b95e4d", "value": "1536:7oFsMHqzISrGqx0WiwbqKHxfd6dldV0OCJRpsWr6cdYV7hsYYYo7U:a9q8tC0C+axfdalBqRfbYRGYYYo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299567, "uuid": "132e56cf-e7bf-49cb-ba5e-51a9b760f6b0", "value": 84248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "8deb49c7-8f44-445a-bae8-198031c178d8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b1513a5-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "776a28cf-a294-49bc-a25a-c312a7e3af0e", "comment": "Malware payload (ConnectWise)", "value": "c7f1f1f4f377658b12d62b80a4d1ce30", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "89297beb-1973-4a7c-811a-db8b9d850f22", "comment": "Malware payload (ConnectWise)", "value": "7abfe35006e94238df36c4a3bfbbd16bed46cfca982aa4f67bf825c55df35d57", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "86157e1c-ae08-444a-95ae-dd6ddac45087", "value": "T157836C43B5D18875E9720E3118B1D9B4593F7E210E648EAF7398822E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "c280d2a5-e172-47c8-a878-570a53aeb8cc", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "66b64390-7c89-4a24-8c0b-fcc24cebcfac", "value": "1536:poG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYA7fJ:zenkyfPAwiMq0RqRfbaWZJYYA1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299567, "uuid": "58c88421-af05-4dc2-8df8-6d8a7ca48f3e", "value": 83208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "2d539cab-057a-4b32-b914-254f8c334b46", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b2af6ad-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "0ae59826-be74-46fd-9be7-ae9e2a40cf83", "comment": "Malware payload (ConnectWise)", "value": "96dffb2a787914c7d5c4a5640e6b5a2e", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "fcb403f9-41a1-41af-9aaf-6582f94aea15", "comment": "Malware payload (ConnectWise)", "value": "b336ec94526154c837c29acd93711985d648c73d8e51dfed8803ff4a301618db", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "040ddbf7-8ec6-48a6-8cd3-9b795ed8fdd9", "value": "T161835B43B5E18475E9720E3118B1D9B5993FBE110E648EAB3398423E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "faee4c7f-1f80-4123-aef0-1e6d08268013", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "692d5cfd-d28d-4fe3-9b60-6eec3c53749a", "value": "1536:roFsMHqzISrGqx0WiwbqKHxfd6dldV0OCJRpsWr6cdYV7hsYYYp7kq:K9q8tC0C+axfdalBqRfbYRGYYYpV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299567, "uuid": "c5641b43-53ea-440a-b6ef-f95313671c3a", "value": 84232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "4b215fe0-884c-4694-a467-59bb291b5d40", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b30eeba-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "7b7adae5-235c-4984-bafb-02d127bf300f", "comment": "Malware payload (ConnectWise)", "value": "9c84bd926cac8a5a63a4f99137f62356", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "d2dd3a7a-9b44-4eaa-b291-3ec3644db4a4", "comment": "Malware payload (ConnectWise)", "value": "11ccedf13d08eb31bd7b72899db3ec208cd142deae7cdadf22920ce8ff690d5c", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "7e99866a-94f3-4a3d-a64f-1c7ca2046044", "value": "T18C835B53B5E18476E9720E3118B1D9B4593FBE110E648EAB3398423E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "ad1479ac-d344-48d1-9c7f-bab4f44cbd09", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "6f430df3-c0d6-4587-9655-5a6a53b7bcc5", "value": "1536:DoFsMHqzISrGqx0WiwbqKHxfd6dldV0OCJRpsWr6cdYV7hsYYYU7IW9:i9q8tC0C+axfdalBqRfbYRGYYYUL9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299567, "uuid": "862e8126-f16b-4100-a80f-a8d95fbc8bfb", "value": 84240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "b3b1874d-abc9-4931-a1ba-1a3be9ec96ff", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b35bb48-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "f3ae5123-5761-4b34-842d-ab4f6028404d", "comment": "Malware payload (ConnectWise)", "value": "3ab1cd21ed5bdfdec3eb7a08e0258d8b", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "6fe8fbc3-471c-40bc-9dc7-1fd3fc19b398", "comment": "Malware payload (ConnectWise)", "value": "e0033adcd4600de890552956c4082efc805ddc7048124a03d791c2819ae088a5", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "54ba6ba4-9fe5-4502-9e5f-1cdc593fd729", "value": "T192836C43B5D18875E9720E3118B1D9B4593F7E110E648EAF7398822E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "118f0673-6c3b-46ab-91a9-82fbc9157ece", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "e00cbc6f-aa00-48fb-bd9c-1d63410d50ce", "value": "1536:xoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYZ77J2O:renkyfPAwiMq0RqRfbaWZJYYZxP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299567, "uuid": "0fb51322-9286-4275-83a8-7dc3e7a9e012", "value": 83248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "606458f1-8795-4eee-b413-523df02ecc70", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b5b4deb-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "fea14def-c4c0-439a-b9ad-2ce2defaebef", "comment": "Malware payload (ConnectWise)", "value": "653897e9424d5e41ae5971ea5f4142fa", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "9a60aec1-c911-400e-b7af-7d058109103f", "comment": "Malware payload (ConnectWise)", "value": "8a220b23502ef78c7d20ae185e6ecec5e94171af68072fdd12d1c4c75ca0d0c3", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "0339ead2-1c6c-4292-9368-c809a3e8bb1e", "value": "T137834A53B5E18476E9720E3118B1D9B4593FBE110E648EAB3398423E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "a06399fa-a023-4b08-bd35-43900a6612b4", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "4a67e764-3723-4c65-bde2-fca9b2f9127a", "value": "1536:LoFsMHqzISrGqx0WiwbqKHxfd6dldV0OCJRpsWr6cdYV7hsYYYI7w+B:q9q8tC0C+axfdalBqRfbYRGYYYI9B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299568, "uuid": "6206efd0-27db-4aa3-8858-dfc336e89047", "value": 84264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "dbf582a4-6835-4270-b54a-377b8872787b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b5cd005-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "3e3599f8-aff5-408f-90df-0d07baab75a8", "comment": "Malware payload (ConnectWise)", "value": "a1f021d51b6f9b765be8fa83d0612be2", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4266826a-c515-42c0-841a-04089ed3a8be", "comment": "Malware payload (ConnectWise)", "value": "67d14fc86976c8fcecb243eb31b94823ecb98e9941c56d308e7f335e38634dbf", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "79b72974-bc05-4b3f-86c7-cd2ea667b820", "value": "T187835B43B5D18476E9720E3118B1D9B4593FBE114E648EAB3398423E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "84c1a0bb-4552-41f6-bcba-60b92764d17e", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "88f485e8-e368-4dea-b004-f767a06fc074", "value": "1536:DoFsMHqzISrGqx0WiwbqKHxfd6dldV0OCJRpsWr6cdYV7hsYYY578:i9q8tC0C+axfdalBqRfbYRGYYY5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299568, "uuid": "0b31ec50-c90d-4b74-aaf9-ad94e4242c7f", "value": 84240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "979bb5e1-65ff-496c-bcd7-1a5f825478b7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b68eea2-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "e17afae4-e6f5-4339-a5fb-923e185e3cbf", "comment": "Malware payload (ConnectWise)", "value": "7ae852ff35436cec85970837d47dcdce", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4ad95003-aac5-46e0-90f4-01eec8ae2597", "comment": "Malware payload (ConnectWise)", "value": "1d1b9439f70337c2c0089395cd8f8bd08eb56f844c5eb11d7be489ddb6e15dbd", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "23e96f4a-eeae-48b5-89cd-59902b540204", "value": "T17F836C43B5D18876E9720E3118B1D9B4593FBE110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "fc94ba96-a571-4a8f-a656-08c7cb2a7bd0", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "55656323-2894-4162-960c-a992c5f42ed2", "value": "1536:5oG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYd7zJG:DenkyfPAwiMq0RqRfbaWZJYYdZG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299568, "uuid": "04e83e74-aa4c-46b5-b257-66b871bdf2fa", "value": 83224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "a2752659-438b-4588-b223-407433e91d55", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b78873d-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "a42174ec-2aea-4987-8c97-6c45c7b9521b", "comment": "Malware payload (ConnectWise)", "value": "29638e4046475ea1a9043b981ba1945a", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "ea29f023-83ed-46e5-889f-16be9b76018d", "comment": "Malware payload (ConnectWise)", "value": "99633ff590093b9f6facb8c374f6ff80fd931fa1d1446c7109c8d5bfc076df7b", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "754b0942-1e5f-4cdd-95c3-42793d0969fc", "value": "T1F0836B43B5D18875E9720E3118B1D9B45A3FBE110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "6bd066c9-5de2-4cb0-84e2-fb47d8041364", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "0b36f20e-aacc-435a-8061-99b8214905ad", "value": "1536:hoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYY57rJd6:benkyfPAwiMq0RqRfbaWZJYY5BQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299568, "uuid": "fae063aa-d075-4c48-afaf-9378a0e25e35", "value": 83232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "c1b9648e-7ce4-4334-ae07-ed0745703412", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b78f860-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "0b82e7fa-7da8-4bf0-b457-a133ab494e29", "comment": "Malware payload (ConnectWise)", "value": "ee11a5052be31bdc316b9544d1a8e7b8", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "74dc568e-a190-466d-99fc-98ea01dd9988", "comment": "Malware payload (ConnectWise)", "value": "f35f7049005e3570baf36c6f6e839e064a0819cf6ba6aa92a185520e0783040c", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "5942e17a-a63e-4498-97d6-a5b113f4ad89", "value": "T17F836C43B5D18875E9720E3118B1D9B4593FBE210E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "fc8f7336-44da-4eb8-9162-38deb8b1a526", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "15e9386b-2d14-4974-9f13-a98ad5cd0c95", "value": "1536:5oG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYJ7vJ:DenkyfPAwiMq0RqRfbaWZJYYJF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299568, "uuid": "1c60fcb9-405b-40b1-8976-e63164523e83", "value": 83224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "209d8079-698c-4477-837c-2076fb6d4145", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b8a99d2-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "0413909f-68d7-4545-b77b-837603713b88", "comment": "Malware payload (ConnectWise)", "value": "95ea109a673a14c3ca061ed4675364af", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "ffe1b1c8-e9c9-4a5f-8c55-87b47853e2f1", "comment": "Malware payload (ConnectWise)", "value": "a2628cc5cb3a3872af96ae1f029ab5f3d18f4ca169921d481a26eb0a9a5e7a2f", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "c5237e2a-4f04-4f09-a279-67ac947fa653", "value": "T17B834B53B5D18475E9720E3118B1D9B4993FBE110E648EAB3398423E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "e3d019df-7bb3-41e8-afc5-57d2022b2ee2", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "fcfee741-3f60-469d-8759-7360b7e4faee", "value": "1536:DoFsMHqzISrGqx0WiwbqKHxfd6dldV0OCJRpsWr6cdYV7hsYYY578:i9q8tC0C+axfdalBqRfbYRGYYY5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299568, "uuid": "44ae20a8-f14d-44ed-a9ab-03b2564e9caa", "value": 84240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "70da9203-7d5c-4eea-9456-18a88379d5ac", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b8bc9ed-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "a9f9ab8c-41de-4403-9eab-7618847f89bd", "comment": "Malware payload (ConnectWise)", "value": "651367d359526d3ba3144cd096f322cf", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "6201017c-32f4-44f8-8dad-bbcf1ca4e7be", "comment": "Malware payload (ConnectWise)", "value": "692df11204c9363f1fc26be3b59fefff10b71516b8f55904efa26c92e999c88f", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "2842afd2-105a-45ab-af1b-e19a45492923", "value": "T1C4835B53B5E18475E9720E3118B1D9B4993FBE110E648EAB3398423E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "864f3ecd-f9f7-43b6-b549-3b23423545f1", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "bb10e37f-313a-43c4-9959-8f0485431d04", "value": "1536:7oFsMHqzISrGqx0WiwbqKHxfd6dldV0OCJRpsWr6cdYV7hsYYYk7gjX:a9q8tC0C+axfdalBqRfbYRGYYYk+X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299568, "uuid": "17bf73f6-a477-40fb-a87e-a95f78ae1e57", "value": 84248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "00af62ca-0de0-4d32-ab08-dc023a46c1e5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b97b805-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "1dec167e-f988-478f-8f09-d53ac7ae55b5", "comment": "Malware payload (ConnectWise)", "value": "f02ec99e28f01671c52c34445d9cb479", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "d079abff-8d6e-4c38-b7cd-b86f5b705849", "comment": "Malware payload (ConnectWise)", "value": "ef09fa2b56e52737a52f84a6129e917a59f41fae5f7f9bdddb4fcc28b0902bdb", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "be46d8be-83dd-4d1b-b2db-0c2e84e4d52c", "value": "T1E5836C43B5D18876E9720E3118B1D9B4593F7E110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "cf204109-567c-4de2-acdc-ea9e29a2c37d", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "339b86ad-d061-4212-8c25-c5251ea5076f", "value": "1536:RoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYt7bJf:LenkyfPAwiMq0RqRfbaWZJYYtRf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299568, "uuid": "d75f883a-a2eb-45c0-afaa-488cbf3e7c8e", "value": 83216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "8f443a50-9193-4560-88a8-25faf1a5b2af", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94a16ed3-1aaf-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "30bedf14-a882-40c0-b845-6fa59931d565", "comment": "Malware payload (ConnectWise)", "value": "dea5c5bc8f1a178f91bbdcf8f2544230", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "07d2fd3d-2b12-4779-8119-196befad1547", "comment": "Malware payload (ConnectWise)", "value": "cbb3c849de922fe3f894e5c8bd9d9d09314b3803d0a8cf80005e9dff60ae35a1", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "3e6ec256-952d-42c4-a49f-5d2e31382af7", "value": "T1C3646D11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "3c81fd0e-aa69-4766-b08b-af4561261667", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "22b89a92-899d-48f8-9a34-b22234dd416b", "value": "6144:XmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFii9:u1iw7gryNkSV1hy1Z1u2JLT9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299568, "uuid": "0d353aef-5000-45a0-9374-838f3bb67371", "value": 312600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "9f22a17d-415a-4518-b0c5-5eebc096c7a5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bc6ea59-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "8394cc41-ae91-4075-8e8e-ca02c2397386", "comment": "Malware payload (ConnectWise)", "value": "6520ab6af82dc4acc1c9a1204ea85a3f", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "39e9a1d9-0624-4b0c-93a2-5bf306784420", "comment": "Malware payload (ConnectWise)", "value": "7f9bd458a7eb70644dcdf08efc909a5c8b4c05e1cc299b245e44734fb1116f7d", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "7efb18a4-5abf-4b2c-be77-b5304fecf645", "value": "T13B836C43B5D18876E9720E3118B1D9B4593F7E110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "5c72d070-dbf8-4067-a48a-1cef235ae684", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "3b10f101-fe8a-4827-9149-89f0b52acb09", "value": "1536:xoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYZ77JX5K:renkyfPAwiMq0RqRfbaWZJYYZxXE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299568, "uuid": "4ec539ba-ccad-49f7-872f-f11c0e7684d7", "value": 83248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "5762254f-db11-4968-9e6e-10f549ba0227", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bcc9481-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "f0330f81-a330-42f2-a82c-9e4705d4a2f7", "comment": "Malware payload (ConnectWise)", "value": "373c2331db6632677e49d0a9e09bfc6c", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "10786871-b412-4964-9ea5-f635026bb01c", "comment": "Malware payload (ConnectWise)", "value": "4b578d537253cf83d5bebbe6ce50c67fe42de719f120d16a57d3a0a34071e923", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "bdc9dddf-8b11-4fae-8055-e7119a576387", "value": "T1DC836C43B5D18876E9720E3118B1D9B45A3F7E110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "f8c8b614-0426-40da-ae6e-73566d3c054c", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "1a4ebbe9-b9f4-4711-939f-b2f0d895af5b", "value": "1536:5oG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYd7zJj:DenkyfPAwiMq0RqRfbaWZJYYdZj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299568, "uuid": "97e12eac-52fc-4224-9745-dec55bc28b0d", "value": 83224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "eb5ad896-5104-4474-9353-658606463a72", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bd0c784-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "6dd56fdf-bede-44e4-9d0f-bb67470b59b9", "comment": "Malware payload (ConnectWise)", "value": "127c349381545ea063c8174991c0410c", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "48dcefc5-baee-4a8e-a51c-0859a2d703b5", "comment": "Malware payload (ConnectWise)", "value": "42ad3caf7132b1d978ce13f9045ef3088f9820c51aa30dfa02990be533bc78aa", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "78d9a045-4ebb-43c6-a574-270b3c1ff763", "value": "T1AC836C43B5D18876E9720E3118B1D9B4593FBE110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "49e1200e-6543-4617-81f5-4cfbc64151b0", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "75f5ab2a-41c4-466d-88fa-699cd4f0ee87", "value": "1536:5oG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYJ7vJ:DenkyfPAwiMq0RqRfbaWZJYYJF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299568, "uuid": "ca0b5334-a42f-464b-895a-5710423bfacd", "value": 83224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "30d6a15f-4359-4455-93a2-5e021934ff6d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bdf2040-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "aacc3cd3-96e7-4f2f-ab4e-801e79590ff3", "comment": "Malware payload (ConnectWise)", "value": "b3efc44bf81869aa0adc18b9c470eaef", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "ec9c298b-0bd6-4d06-a262-fae1fb37b260", "comment": "Malware payload (ConnectWise)", "value": "f0f507a9d50f93ff17d0731f42a84fbdb43171e6b6990f2f99184b82c811fda3", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "9039e362-9634-4d73-a8f0-e4e865a2e0b8", "value": "T1C3836B43B5D18875E9720E3118B1D9B4593FBE110EA48EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "3aeda900-94ce-4b21-ad92-95c8465c5392", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "b042d933-6e61-431c-a130-48c2cb320482", "value": "1536:5oG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYJ7vJ:DenkyfPAwiMq0RqRfbaWZJYYJF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299568, "uuid": "e21fbac9-46fe-40e8-bf1a-3ef6f6214b30", "value": 83224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "ff26d1a3-75d5-40ed-a82a-5e4d95c2d346", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4be04f7d-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299569, "uuid": "0c63c88d-6612-404e-b0fc-5cd5aec37682", "comment": "Malware payload (ConnectWise)", "value": "41527bd9d626c5a805c5be978e9afdcc", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299569, "uuid": "d62a5175-bb61-417a-b007-9e6a3749cfce", "comment": "Malware payload (ConnectWise)", "value": "f5c21fa48403824de85478d85c2b99381d87311e3cf74f39cb5b8bc8e2439ecd", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299569, "uuid": "315225ac-b083-4680-881c-386b86b30a8f", "value": "T1E5836C43B5D18875E9720E3118B1D9B4593FBE110E648EAF7398822E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299569, "uuid": "84e359b3-057b-4b11-97c0-a7c379ae0160", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299569, "uuid": "e47de52f-b78a-4f20-87b2-3f8641747530", "value": "1536:JoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYV7/J:TenkyfPAwiMq0RqRfbaWZJYYVV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299569, "uuid": "4de43499-410b-4e92-9ce8-96f3397924b9", "value": 83240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299569, "uuid": "358eab10-288a-4417-900f-1a45a83e2359", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4be10449-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299569, "uuid": "44ced8e9-382f-4169-858d-29513857a074", "comment": "Malware payload (ConnectWise)", "value": "0b47ad6ba4be8852bf032f05d22ba233", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299569, "uuid": "470d9b0a-4ad6-4003-86b4-96b8d2c21d27", "comment": "Malware payload (ConnectWise)", "value": "a55ba5836b229d6304ee997309336fac8b9a089deca98d087aaf19da3c03b17b", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299569, "uuid": "f1b5eef8-761b-4d4d-a35b-e4f266469a7b", "value": "T121051901BBA05018FDF716FA85FE7068993DBAE01714E0C752C41AED9625AF0BD36B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299569, "uuid": "03602c41-6aa8-4960-9470-96a04333ba4a", "value": "cfeaf9172bc0441ae75aa0bed85df218", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299569, "uuid": "a373c0e0-d17c-4415-a3ee-53fba32b34e9", "value": "12288:0hRPuvoarC2wPDiisuutU4GwP1PdS8eSlsIRu55b+MGWF:a2voarC2wIGwP1Pd51ljtC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299569, "uuid": "2956e25b-cda1-4295-b0a8-cba47a7ec65d", "value": 826656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299569, "uuid": "ac377342-1071-4d59-b629-4ff24e4f070a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94a15a4b-1aaf-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299569, "uuid": "380eee8f-76ec-4885-ad65-03ec904102c7", "comment": "Malware payload (ConnectWise)", "value": "c456190a845b18b2de4e6e3b9a6172f5", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299569, "uuid": "919efc6e-bde4-45b9-95fc-e5ab37d2232c", "comment": "Malware payload (ConnectWise)", "value": "5c5778df0c11587eceebdb43a4a65c427d36bd9fd6fe91f98255a7515665b769", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299569, "uuid": "02650281-9db4-4874-bf13-d58e3b12758d", "value": "T1A3646D11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299569, "uuid": "879de9cc-b975-451c-aae7-c5334a7113a3", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299569, "uuid": "973257a8-6beb-4d63-8e89-ef3836b16de3", "value": "6144:XmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFii9:u1iw7gryNkSV1hy1Z1u2JLT9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299569, "uuid": "5e15bdcd-91ef-48d2-889c-1e155fa953e6", "value": 312600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299569, "uuid": "4a2fcadf-89e8-40cd-b12f-c555217514da", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bf45047-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299569, "uuid": "1c870be4-4235-4bb3-8926-24a235ce10ef", "comment": "Malware payload (ConnectWise)", "value": "dfa615e54789c4a313598510693c978d", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299569, "uuid": "4a2356a3-7dba-4197-98b5-f0e0e10d7eef", "comment": "Malware payload (ConnectWise)", "value": "687b6286256c4ee53d3316b941879db555825fb71776e19eebcdcd0ad9133434", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299569, "uuid": "4ee532ab-4aff-49e8-bba5-c88e71747ea1", "value": "T13C836C43B5D18876E9720E3118B1D9B4593FBE110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299569, "uuid": "14407c9f-01ff-4110-8906-f97898f8d157", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299569, "uuid": "9861f158-a2eb-4d98-beea-8ea5c85a1e52", "value": "1536:RoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYA7XJE:LenkyfPAwiMq0RqRfbaWZJYYAdE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299569, "uuid": "a580dd40-d6e8-4fe3-857f-1005e790173d", "value": 83216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299569, "uuid": "20b01753-c3c7-45b7-b732-90982ddd21e7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "949e1a13-1aaf-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299570, "uuid": "ca2558ef-e253-4a8b-a672-255ac477cbdb", "comment": "Malware payload (ConnectWise)", "value": "762b9ddca6745c314a56bf2673d5127f", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299570, "uuid": "d782d6cb-10f9-47ba-beb3-b9b01f4402fe", "comment": "Malware payload (ConnectWise)", "value": "bf92439859da3f17cc09b0c868ab6d2fe54cdf9a2755216eb97987ec4f912a25", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299570, "uuid": "9fc80e7c-1567-4d81-a9e6-86df5fd4ac2a", "value": "T11E646C11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299570, "uuid": "2110dfcd-a056-4729-8c9b-1b2aacaf282f", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299570, "uuid": "c638192b-de39-404d-aac2-10865ed38cef", "value": "6144:nmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFii9:e1iw7gryNkSV1hy1Z1u2JLT9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299570, "uuid": "390fec36-f3aa-479c-810a-97346985ddff", "value": 312584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299570, "uuid": "12d6f93e-85b1-49d9-b2fe-467a3d0c6a96", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ce7c6c9-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299570, "uuid": "80827896-3629-4413-913d-800388b3ee57", "comment": "Malware payload (ConnectWise)", "value": "fb1174e6d874a06a4efc74440297ffb3", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299570, "uuid": "67ecea15-8726-46f0-827b-1acb364df5f3", "comment": "Malware payload (ConnectWise)", "value": "ffa579b1d7b1a47dc7353dcb21aea41e80dfe3ed94086d14839357ce221c8309", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299570, "uuid": "37f27c7e-dd71-40cc-999c-6559a7941d83", "value": "T134835B43B5D18875E9720E3118B1D9B4593F7E110E648EAF7398822E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299570, "uuid": "d7993a8c-d90d-473c-97a6-f7ae8e043955", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299570, "uuid": "5099ba52-3b00-4890-b091-c4a48351461a", "value": "1536:JoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYp7DJOa:TenkyfPAwiMq0RqRfbaWZJYYpJOa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299570, "uuid": "498db694-95ca-4926-93d3-07b5f1ca90d3", "value": 83240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299570, "uuid": "72bf072c-698c-40c3-8860-e37aa619ed46", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ce9e967-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299570, "uuid": "9e19e2d2-b6bc-4b1d-86bb-be170d0874af", "comment": "Malware payload (ConnectWise)", "value": "825e2823345588d91497f7949534fe43", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299570, "uuid": "219a55be-1ea1-4e05-9597-2fe717e765d5", "comment": "Malware payload (ConnectWise)", "value": "9f1771db501e257b9eb1ae31399bbf274410c0850f156f65fdc4a0834b78da9f", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299570, "uuid": "fbaf137b-ea6d-4008-bd7b-81e397e8dc14", "value": "T155836C43B5D18876E9720E3118B1D9B4593FBE110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299570, "uuid": "0968f501-3c64-4b7e-b4d4-3148118f5f5b", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299570, "uuid": "c9bd2bc2-9778-4590-b0bc-b74caf913211", "value": "1536:hoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYY57rJ1x:benkyfPAwiMq0RqRfbaWZJYY5BL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299570, "uuid": "295e57eb-4d24-454e-982e-7d1a32a7b9d3", "value": 83232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299570, "uuid": "7d0372bf-3ee2-4616-a495-ee51f4ab0325", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e115070-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299626, "uuid": "f7abef52-fe7e-481f-9821-3c7eb73517a0", "comment": "Malware payload (ConnectWise)", "value": "55d293037110f68b359c9f530ba71dec", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299626, "uuid": "90f11caa-cbfe-4c46-bf4b-d678d2d73aea", "comment": "Malware payload (ConnectWise)", "value": "9069e0fe2b479639ce904f70f8f3527e126d66824cf67f5d3c0097f2c0b5fd57", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299626, "uuid": "01417a28-0d71-4876-a19c-0f7ba9cb5950", "value": "T109834A53B5E18475E9720E3118B1D9B4993FBE110E648EAB3398423A0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299626, "uuid": "53ebb15e-291b-4097-b81f-5ca83f75ac6c", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299626, "uuid": "ab38fa05-e17d-4752-866e-4f091a323a2a", "value": "1536:zoFsMHqzISrGqx0WiwbqKHxfd6dldV0OCJRpsWr6cdYV7hsYYY87Mf:S9q8tC0C+axfdalBqRfbYRGYYY8e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299626, "uuid": "d46e928c-a92f-431c-92bf-cb7b41d13835", "value": 84288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299626, "uuid": "4c73e47d-b623-4c76-a11f-5224256d5d48", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e5669ac-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299626, "uuid": "a19b2c43-f53a-4622-ac75-168a4915c2cc", "comment": "Malware payload (ConnectWise)", "value": "71c97559bdeabcc3c480620162e7ecd4", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299626, "uuid": "e7528500-4fa0-47d4-9580-1c7bd3a61770", "comment": "Malware payload (ConnectWise)", "value": "9e14ca371602d44c4cddc4cc8eb558f48b9d8c290f2a2e8e5b9f6c9c891a1e16", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299626, "uuid": "2bfd2b6a-4536-4bea-844a-20d604f642c6", "value": "T1B9646D11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299626, "uuid": "94c6b503-f001-4197-bcf6-7da670ca11b6", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299626, "uuid": "6b6b8908-17ac-4b89-ba59-7da4cc270830", "value": "6144:WmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFDi9:91iw7gryNkSV1hy1Z1u2JLO9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299626, "uuid": "3fc85d85-302f-40bb-94c1-254e60bacb09", "value": 312616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299626, "uuid": "ef8564ec-6d58-4c78-824d-d16dc2b4e53d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e5c9a2d-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299626, "uuid": "15822da9-9ed1-4eb1-8b0c-7a1dc48b508f", "comment": "Malware payload (ConnectWise)", "value": "504dda678fba1d0bfc55c2cac0260517", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299626, "uuid": "d2d20457-d9ee-4d98-967b-64cb486a8015", "comment": "Malware payload (ConnectWise)", "value": "a521f4b2618b81c512425e3217b243a55751f1a654a1bac2f625e9fea13d26e1", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299626, "uuid": "95db0037-7226-4059-aacf-79a1356db670", "value": "T193836C43B5D18876E9720E3118B1D9B4593FBE110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299626, "uuid": "360f22f1-1cd7-4df3-af60-cf7b5c9ac28f", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299626, "uuid": "de21a2d3-9119-4119-9339-ea9f58f729f2", "value": "1536:hoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYY57rJBR:benkyfPAwiMq0RqRfbaWZJYY5Bn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299626, "uuid": "509a5702-791f-405c-818d-5caaa17ff712", "value": 83232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299626, "uuid": "c33dc129-a155-4a9a-a3c3-6780b24aebc0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e89bb6b-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "a67b8a5b-d779-45d2-b9f3-3c9d4ce0c70b", "comment": "Malware payload (ConnectWise)", "value": "0e180d62c285361d85b0759ef13f6377", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "14b5c2e2-33e5-460e-abf2-cb9745f49338", "comment": "Malware payload (ConnectWise)", "value": "c92cdafaad2abd024ee9e502bf9b16bac90ed5a8bb2ee23b47192bc882bd413c", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "9f9e5922-ff26-473d-bb79-f35af8944ae3", "value": "T1D0646D11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "55388364-de00-4c3a-9d39-b2a902bca523", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "d7f91099-d283-44ed-87c6-ca3efd425e6c", "value": "6144:+mlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFDi9s:11iw7gryNkSV1hy1Z1u2JLO9s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299627, "uuid": "f4f6902d-6b18-4543-88f6-3b14c6e8fcc3", "value": 312624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "6bf15724-4063-40b7-93e1-970d303a8797", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e8d1e57-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "c4acbe8b-d973-4aa0-aee6-36c50d100b12", "comment": "Malware payload (ConnectWise)", "value": "0ea8c43a2ee32b5cc11503b829ca9c47", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "8d8e2b71-8a42-4c09-8630-cb45e1be3700", "comment": "Malware payload (ConnectWise)", "value": "61caa07cd8a87b9e6eae8b57a36de21e9eaa8b3458e5e9c04fc66be76db86f4e", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "c80cad52-3de4-44d6-b2ff-6a8348d839b1", "value": "T148646C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "f75010a5-41f1-4a4b-bafc-0a0dd645474a", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "278a5cde-f55d-47ef-b62e-e6077a447bcc", "value": "6144:FmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji99+:w1iw7gryNkSV1hy1Z1u2JLu99+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299627, "uuid": "74fc7924-735e-42b2-b09f-190405c89478", "value": 312624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "7a3867f5-4d06-4025-b34b-da998e20d492", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e97ce80-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "b566684d-833c-4a0d-bfc6-4ea3334f54c8", "comment": "Malware payload (ConnectWise)", "value": "c09bec35c29f4c136431deb20cc1d214", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "58bf0e24-be5c-43ef-a686-db82dad3f8e3", "comment": "Malware payload (ConnectWise)", "value": "9e6f55acad0a30f465be9436fb5505038dc79f447fdce94ebece37e4ec041de3", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "0a68a452-cc04-4a67-b8f0-6ed746d894a8", "value": "T1AA646D11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "9f6b55c9-31a5-4ddf-889e-694ef6285544", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "ee4fc333-a41a-4935-9e2c-cd2b0535de88", "value": "6144:OmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFDi9:l1iw7gryNkSV1hy1Z1u2JLO9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299627, "uuid": "61376182-9088-4a82-91ff-c1569990f6f9", "value": 312608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "5619f904-ad03-41c3-b1c6-566fcfb9a6a5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e9c3bbe-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "e0f5e081-49d1-48a9-a610-f288f6af69ef", "comment": "Malware payload (ConnectWise)", "value": "5710ac6a0ff560b3ea4c93d7e98ac9d8", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "13075a22-8a4e-4a7a-a322-ab03395d5b3d", "comment": "Malware payload (ConnectWise)", "value": "5094e8d6ca171ec6830cb59bfb1e066fed23ec161bbe65fea563506eb7eaf532", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "ab01ed3d-8400-4c87-b674-5744efa4931f", "value": "T194835B53B5E18475E9720E3118B1D9B4993FBE110E648EAB3398423E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "78b14171-ae1d-4108-9379-bc93b2eda838", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "de3852a6-b358-4367-bf5d-570e7d297c4c", "value": "1536:ToFsMHqzISrGqx0WiwbqKHxfd6dldV0OCJRpsWr6cdYV7hsYYY47YZYO:y9q8tC0C+axfdalBqRfbYRGYYY4Mj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299627, "uuid": "fba3bf15-2f03-46e0-885e-9ba382e34e24", "value": 84256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "721b313e-9a4f-42bb-b83e-2eab618ba805", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ea01971-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "81f65323-ab86-4abf-9ad0-251d8c24df33", "comment": "Malware payload (ConnectWise)", "value": "4f988ffb3b0a4c998037cc2b283b0282", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "3826e43e-adbd-4f68-a187-46b30700bc68", "comment": "Malware payload (ConnectWise)", "value": "34dee6e6d1297ec7e63a931569d0733aee65a5435cceb204a9489f062f27c531", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "f09637f9-080e-4b02-9d1e-7c3892d61095", "value": "T141646D11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "004e2c31-9a72-4e4d-a598-054ed49f2b30", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "1f89ceca-a1dc-4225-98ff-39600d2e74f7", "value": "6144:mmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFDi9:t1iw7gryNkSV1hy1Z1u2JLO9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299627, "uuid": "4be8a9df-90de-4e68-b195-98070040aa5e", "value": 312600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "100f784a-43da-4ae5-b22b-12b878413642", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6eca6927-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "d7b02bd5-161c-4b16-a3c1-e1430d98ee61", "comment": "Malware payload (ConnectWise)", "value": "da264fc30c09c62358bedaef1b18e52c", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "33d48257-1b43-4256-8d96-827a6a35205b", "comment": "Malware payload (ConnectWise)", "value": "47fe26f2e902205243db2649e8bcc74c12e84c04258087acafc2a1ecdf924f8d", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "4df871e6-8450-4793-9ace-2883aea7d7b3", "value": "T1BB646D11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "b03904ad-7533-4a60-b31f-49cea886658a", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "091d247d-9158-4d7b-a9ba-057375a78a6d", "value": "6144:+mlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFDi9F:11iw7gryNkSV1hy1Z1u2JLO9F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299627, "uuid": "9ab16fa6-c86a-4e28-a772-e86f94067bb3", "value": 312624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "538e3a72-cb7f-4213-ab0a-aca84ac4fdd0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6eccf0a9-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "44a1be0e-9d09-4e92-8cda-28f666c47813", "comment": "Malware payload (ConnectWise)", "value": "28f32a452818db5a1820d6839b972ddd", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "b00e4f57-152f-41e2-80d9-dcbde94bfd75", "comment": "Malware payload (ConnectWise)", "value": "001a7a0fed89540471c0115f8afc13ede46dfc0eb4590954c7a1ed7833dfd600", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "c85a7100-1144-4abd-8006-f56113b2f8bc", "value": "T15D646D11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "a6f455b8-90bd-4460-b504-cb9d39bd26dd", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "d613eaa2-98c8-4a07-92e8-b17c076d7144", "value": "6144:WmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFDi9:91iw7gryNkSV1hy1Z1u2JLO9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299627, "uuid": "86820efa-7eb5-4692-9a98-901c82a2bba4", "value": 312616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "f2b40861-7a47-4b0d-880f-8d5c3290e156", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ee2e4a7-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "79a307b7-c06f-4b95-807d-1de8e02614d8", "comment": "Malware payload (ConnectWise)", "value": "a0370da47310870f7294f0fb2afd0030", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "cc2fed54-3d65-46e1-8e6a-0cb463faa3cf", "comment": "Malware payload (ConnectWise)", "value": "998b0a5b5db38a3c33a38cb9fdf6132b60a72a41add50a5a4fe886da0d624b16", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "96476dda-0b53-4e15-bb3a-fcd57a3b9751", "value": "T14F05E701BBA05018F9F716FA86FE706C993DB9E11728E0D752C41AED9625AF0BC31B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "bd22d661-22c6-484d-944c-43e40b957b42", "value": "cfeaf9172bc0441ae75aa0bed85df218", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "cf4de460-d2c9-4864-bc59-bd7c58cf730e", "value": "12288://wJmipCF602Qiituuv6qLvXu5rhYgtO5SMPvE8yudLH9UD:/n72EXu5rhYgtO5pvTfUD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299627, "uuid": "f2500539-456c-45dd-9c6f-0f37c09410aa", "value": 823608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "7a8e6b81-c9ad-40b6-afc2-f8568e73e299", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc6a7281-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299689, "uuid": "7e4e570d-a21a-4756-bc18-71138d4fc8ae", "comment": "Malware payload (ConnectWise)", "value": "8476541ad56540e7426a0c3ecd2cf5a8", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299689, "uuid": "f4f170f9-de28-446d-af7f-ba1585726143", "comment": "Malware payload (ConnectWise)", "value": "b2d9e8ab91a815bb0033cc3755dddef0d7f36e650698e09edbb8794e8f84155f", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299689, "uuid": "0dd84906-f7c7-4ece-8087-ff2444c0b9dc", "value": "T1CC836C43B5D18876E9720E3118B1D9B4593FBE110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299689, "uuid": "1de6f6b2-e6c1-4d58-91f8-ea8aed62e4c9", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299689, "uuid": "199413e1-b0fe-449a-bb9d-a25de4d62c0b", "value": "1536:xoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYl73J:renkyfPAwiMq0RqRfbaWZJYYl9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299689, "uuid": "fb69771f-ae62-4d39-85b5-7a4c28456d1b", "value": 83248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299689, "uuid": "102dde9e-bebf-4aca-b0ae-46c070bc80ef", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8eb9fc9-0ad2-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745299689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299689, "uuid": "2082d37c-43b3-4309-b72d-54ff662cbe40", "comment": "Malware payload (ConnectWise)", "value": "9f3a5bce4f293e6c1a0c9219d7eeb69d", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299689, "uuid": "7940e67e-f69c-4bcd-a768-ae8c9f1be0bd", "comment": "Malware payload (ConnectWise)", "value": "141f4fee7bebd57d3c93206c9884f84c855a04d0b440d31a1430ab8fa2fd6426", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299689, "uuid": "22bcae14-a24f-4783-8104-eabade091123", "value": "T121836B43B5D18876E9720E3118B1D9B4593FBE110E648EAF3398426E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299689, "uuid": "a7be90c9-b1d0-467b-8a25-6309a30d4095", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299689, "uuid": "ae1a6d2e-2bfe-45c2-a8c5-8d11f5f35f8f", "value": "1536:BoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYl7HJ:7enkyfPAwiMq0RqRfbaWZJYYlN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299689, "uuid": "3e39c590-f93b-4ff8-a6ab-c76e6510f5fe", "value": 83264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299689, "uuid": "cd7d7be3-d057-493f-9a97-c754dc25c3b6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3c8c440-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745299743, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299743, "uuid": "be372c7c-f3bd-4583-8e9b-9e009dc8aa87", "comment": "Malware payload (CredentialFlusher)", "value": "551ba46077737498abb9fc66da2c3657", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299743, "uuid": "a79391fc-7ab6-443f-96ea-87b204d1868f", "comment": "Malware payload (CredentialFlusher)", "value": "cf158028f3ccc8bb22f56c8ea91633cbbaaaa5693ccc5bc214577dbac53da271", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299743, "uuid": "b4a5de23-5ff3-42ef-b548-eebce1d24086", "value": "T13BA53357AAE99477DD750B304AB20383053DBE942A6D53AE2A464C8D1C73370FA31B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299743, "uuid": "c291493b-22fb-458d-8984-2b7889eec916", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299743, "uuid": "b446b406-1e02-4c7b-9f37-1a42b773020d", "value": "49152:g+IWq1HjfNSikEJYMIWTmKWcQ+BudHj5yVvaTbO:OrHjcwY3iQBj5ZT6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299743, "uuid": "1dc8d6ba-0f97-4df4-b3c9-25841ad47e42", "value": 2154496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299743, "uuid": "e60eb656-f092-4bb4-95f2-f29f4d3b1323", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11219b24-1f3b-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745299899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299899, "uuid": "586b3b79-d5e0-4b09-9f5b-a8236fdd5b74", "comment": "Malware payload", "value": "821f955162a021f2a7f0257b07fce1b2", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299899, "uuid": "a4074c23-fc52-4b4c-9464-9cdae5386fc1", "comment": "Malware payload", "value": "414fa7f5d5a30d0ad0eba824f1df08a20681508cb7ed85d3b31fad87293d9aed", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299899, "uuid": "5236c003-31ca-41e2-ad55-a1b39ae670b0", "value": "T1C58533195F078C15E39401BCEBB16B79B8A5115BC1A8077C888FBE64D7EB9A303B1D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299899, "uuid": "eb5d3017-08e6-440d-b0a4-faacb3f4af90", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299899, "uuid": "5ccc9998-f211-46ac-8f01-0a903bd064b2", "value": "49152:jH+mL7RqkQQa4juncnNOUw98vYBRm0mFE:jHd7RO46oFw98vqRdw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299899, "uuid": "4ec58aee-0816-4372-8c8f-1e0f2924dc65", "value": 1847296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299899, "uuid": "d984ff93-5266-47ae-95c3-24d251b1dcb5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e729a7c-1f3b-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1745299949, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299949, "uuid": "149ed49d-e805-4ca2-9989-cdaf973b9cad", "comment": "Malware payload (Amadey)", "value": "f87be117514586b9d4c02e70ace7ae55", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299949, "uuid": "c79cdd7a-4ebc-42eb-952a-ea9015c6b1d6", "comment": "Malware payload (Amadey)", "value": "10d70d6ad5f882199b31bdf6c0c9953b990fa4d4b4f23d04a070ad3b7ac6b208", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299949, "uuid": "aa57c617-12e3-40ff-abe2-67a18f1bfc2e", "value": "T1E6159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299949, "uuid": "09ff60f9-cd86-4440-ac1a-f2a93ede7dd9", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299949, "uuid": "c49f6ba3-73b7-44d5-8771-6654701bf031", "value": "24576:PqDEvCTbMWu7rQYlBQcBiT6rprG8ae4V:PTvC/MTQYxsWR7ae4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745299949, "uuid": "04f60f0f-086b-43c7-8204-1a8a43ace861", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299949, "uuid": "947fad68-67d2-48d0-b011-e20fd946ff7f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b0759a0-1c8f-11f0-82df-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1745300045, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300045, "uuid": "2e14646b-2e65-4d68-b69c-ab69a5e4cb1a", "comment": "Malware payload (LummaStealer)", "value": "029b2c25a39ef4a9f7a4d15ead9635c6", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300045, "uuid": "d174a7d9-ad00-43de-8fd9-078c047d1957", "comment": "Malware payload (LummaStealer)", "value": "4430b0f602410397aadb01d52ad95a6a8ca876dd79eb68135bbed4469f70738f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300045, "uuid": "e90f7af6-1fe8-4805-a11f-74a65f9f8627", "value": "T13D95336E78813929C882C370D93B5E96B93BE6B0429407785C31FDBD9D6BC1376E5A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300045, "uuid": "1e29415c-64ff-499c-a07d-cc841745a99c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300045, "uuid": "5679295b-6851-4d7d-8932-bc5f99c9cdcf", "value": "49152:qEI3wOTynLS3JWro62PQsgPPLdqj3F8yGRGiMC:qEEdyOZ+oPuPPLJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745300045, "uuid": "30c299ff-e9a3-4f3d-baca-eb7daf97e446", "value": 1878528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300045, "uuid": "6bed9d2a-3a5e-4326-91d3-a8b7e8586b48", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "687428f5-1f3b-11f0-82df-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1745300046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300046, "uuid": "a107bc27-ad3f-4d6f-a3d8-80ba28f85d6d", "comment": "Malware payload (Vidar)", "value": "b51cce7f18fca52d4d54384effcd88de", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300046, "uuid": "b6fa6636-da97-438e-ad55-f5fade83705d", "comment": "Malware payload (Vidar)", "value": "5dc293fd7a4baefef73f6af259839382db397cbc540bcb2009c05d3b7603bf8b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300046, "uuid": "3d5f322a-7b41-4436-bc45-2ade3b20f310", "value": "T16BD37C117282A0B1E8472B741E7F77BDEEB04A256BA08DCBE3C47D598F1A1E52371C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300046, "uuid": "b6825ed7-c58d-4f90-a578-88f955fd4261", "value": "351fbae162a7dacb0ecda3be35f09973", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300046, "uuid": "d3cfd27c-9878-4130-ac82-b5f2864a5930", "value": "3072:aVvH8RuVrLyEj/S2CUGACcceJd/klDHa/R8mxu3s8QfGu:KH8RuRLlzgUd6a/AslfGu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745300046, "uuid": "2d0a3b71-2e53-442e-bdf5-e817e491ffb3", "value": 140800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300046, "uuid": "4475f89d-97b2-41b9-a023-8be1429e7487", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68c0fa99-1f3b-11f0-82df-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1745300046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300046, "uuid": "df0604b4-1a34-4a5a-b500-77cafd08274d", "comment": "Malware payload (AsyncRAT)", "value": "dabfa284259addea88883cf94a3086f6", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300046, "uuid": "e7f66331-1d08-4317-b370-cb00ff3a4d9d", "comment": "Malware payload (AsyncRAT)", "value": "fb150c0588aa165d2dcfd2c6c0b35afbad701b01f434e33b6078d9a39822d3ed", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300046, "uuid": "610df149-54ad-4966-81b9-30f76e91a22a", "value": "T13394CE6FF7E25F01D3981E72E0F7952A13B1A6872233E71D3E6812A66D422B44CC63", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300046, "uuid": "945089b3-3345-46bb-b24e-b07935f815df", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300046, "uuid": "89380777-4a73-4f57-b01a-832eaa38d81d", "value": "6144:T76Re5V+UCbNs1ZJ+vr6fMvaJFYfosMDGbR1piRtkuQKBulvnkqkDDe7bf5erDUU:YC7oPrUwaJ2ftWgNiLnYvnm3evfwrD9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745300046, "uuid": "214e2ff1-6b40-45c9-b949-f0400e9d5d10", "value": 448000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300046, "uuid": "11ae056f-4fa1-4f19-af75-fe9c20969dfb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68ce2833-1f3b-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745300047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300047, "uuid": "8041a95a-964d-4d2c-be6d-10e901794ad6", "comment": "Malware payload", "value": "37ca0f97f4856df4039c53a7bb42a636", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300047, "uuid": "b6167b78-21c4-418b-a8fc-f07096bdfa56", "comment": "Malware payload", "value": "30ba98d26a3b996aea663d65d9b3258fae6690beb86c2b00565fac05108a3e0c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300047, "uuid": "2503794b-b8fe-4892-9686-7ec3748320fd", "value": "T1E594AF06FB6504F9E167D138C9524905FB727C9E43B09BEF23A44A961F236E09E3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300047, "uuid": "d6d45ddf-53c0-4cb1-936c-23b4b9beaa45", "value": "aa2ac8e0a800e04e9552a74a0feb58f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300047, "uuid": "3490ad4e-95c4-46dc-858d-c754baf81640", "value": "6144:YP8ITe5ygqVPNtlmab3ktjKopZwGaXD5pSXnoSiLoxwMlBEA3dxVJ3Yjho:YP/T8ybP7lFktjK4ZadmozANxVu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745300047, "uuid": "2b7655b7-8534-41d3-821f-33b843d06a35", "value": 433664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300047, "uuid": "caefde56-0488-4956-9468-a6cdf7edbe2c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68ef6d51-1f3b-11f0-82df-82aee05be84a", "comment": "Malware payload (Ransomware.LockBit)", "timestamp": 1745300047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300047, "uuid": "a7b5fa81-bf20-4ade-a46a-afab0245cc38", "comment": "Malware payload (Ransomware.LockBit)", "value": "1fc27b282f32c078dd2dfcdcc7696236", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "lockbit", "colour": "#c3baff", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300047, "uuid": "ab0a926e-e91a-4489-8e67-053235753423", "comment": "Malware payload (Ransomware.LockBit)", "value": "7ed131e9cf7d7f87b0c7e95e121025f35f526c927e8dda59196c9022870193b1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "lockbit", "colour": "#c3baff", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300047, "uuid": "5759e32c-79ee-47e9-991d-5572fb21d717", "value": "T13525DF2545A192E6F29154B27A897190F033BD3B87395FFF82F0E325154AFC41B2E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300047, "uuid": "d3ca8a60-d29a-480c-a252-1f899e3398e9", "value": "130d5621ef2323889c6e1ed2746329fe", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300047, "uuid": "5313a751-ef32-47f8-a38e-22c7f90c9584", "value": "24576:MPIt+AtP8o1BZyiCZvr3O8KsewWkprcLhlxhX6F/FhlxhX6F/k:8s518Jr3BrcNB6ZB62", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745300047, "uuid": "8d4602ff-bbc6-454b-9b5d-3b45d5a6a4f9", "value": 1030656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300047, "uuid": "030fd152-b593-4920-b4b8-206847fd23d0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6972a3e2-1f3b-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745300048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300048, "uuid": "cdbcbd81-a93b-4fb7-91fd-2478998b1c4f", "comment": "Malware payload", "value": "975e2a460498b43bf2cfc9f0a7de3357", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300048, "uuid": "1bef9d09-426a-4ae3-a0ce-a6e3fd73db36", "comment": "Malware payload", "value": "6240842fef2cf0c4bcbd3bd5a233d6f2db96e8981c2e24d4d7ae347d254f61fb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300048, "uuid": "8bffbba2-45dd-4018-8749-92ecae4bd692", "value": "T17195F135559282EBF29250F26A45B390B073F873423D5FAF80F4E3291917AD41F6E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300048, "uuid": "183bed02-7dcd-479b-a9dd-27f49e28d38d", "value": "130d5621ef2323889c6e1ed2746329fe", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300048, "uuid": "8673a57e-3917-4d52-ad3b-a19fc1c893d3", "value": "49152:7KXMoWV1qaoufuEJUE6si/kpKFbjfuEJUE6si/kpKFbt:OvYAWfHFGFnfHFGFp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745300048, "uuid": "cee869b5-0cd3-4eb8-ad10-f46e0d9244e2", "value": 2060288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300048, "uuid": "aaf6a665-7b45-46eb-a6f2-26eb63367b54", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f693fee5-1f3b-11f0-82df-82aee05be84a", "comment": "Malware payload (DCRat)", "timestamp": 1745300284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300284, "uuid": "19990457-ae65-4221-a903-588494130165", "comment": "Malware payload (DCRat)", "value": "a8b2d8bedb110def8d7c93cce3c00c8f", "object_relation": "md5", "Tag": [ { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300284, "uuid": "869dd1ff-8295-4b12-a657-a0d1e3697b4a", "comment": "Malware payload (DCRat)", "value": "c4e55bd5f573b6c86eee7b6832a467bc7ed2372b1346a84981c1a156365b6f61", "object_relation": "sha256", "Tag": [ { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300284, "uuid": "54a3b334-874a-4929-956d-9e524b2b7a0e", "value": "T14D01B10935C6E3A46BD25FBAB92FE95CF01C16131B5DA400F0C88EC5AF35135A664D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300284, "uuid": "12922290-330e-4dff-aed4-05e5b1fe5e43", "value": "24:dbFCiTLyGWkwV3WP/y3U0x2xg+y02FoaRN557+:JFCiTLyyw1c/WH8a+krP556", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745300284, "uuid": "b1c1811f-2230-4126-90df-3b1535a8e137", "value": 785, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300284, "uuid": "eef7c4a0-5871-4d35-8065-21b586d99436", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9fc6602-1f3c-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745300720, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300720, "uuid": "a8fbec3b-e4b0-4662-a178-a1d343226ce5", "comment": "Malware payload", "value": "63692be5a2dc31655fba74a91d57c79d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300720, "uuid": "28c9b1a1-414d-4ecb-8535-f55e2b9c1db2", "comment": "Malware payload", "value": "028ee8feb2bc863c8022fb6d510a5d9b263aa68439891c77534ac97bcbd64f16", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300720, "uuid": "12bd0412-8691-468a-99a1-9ca1e29f208a", "value": "T1ED2633F2FF733720D2B09BF456720D4522B927E351E8E3D456898BA0A537245E881E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300720, "uuid": "34c6e821-d687-49dd-8f06-b3ef81045dff", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300720, "uuid": "82cd55eb-43f3-4917-90cf-ac0d321308db", "value": "98304:3lDtxx2a3+Z1N+0iG5p4G9qkultGLXV/53FYCy:Vs86k0Hpz9qkultGjVTJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745300720, "uuid": "abfeebb7-dfdb-485c-af7d-c39fdab96e5c", "value": 4650496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300720, "uuid": "d3b83373-708c-4808-912f-e529768d96ae", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a014ac44-1f3d-11f0-82df-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1745300998, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300998, "uuid": "7e0353b4-9f50-416e-8401-eaa46aa31ca6", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "57b436f08b476204899d6b6ce23b32dd", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300998, "uuid": "ddd42630-03cf-4073-90cb-f6e73769b8e2", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "297f4bd02dc50e36d9332734d850dace190cbdd4fa094e9ad211b1850716882d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300998, "uuid": "cdc741cf-104a-428d-afea-c5d474520e91", "value": "T1FEA533185CE38AFFCF45A9FB8CD345C3B93867195E95E0A03E88B12C4E133766929B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300998, "uuid": "50a2a593-c4fa-4a17-9cd6-aa9e8773c633", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300998, "uuid": "2aa17231-8911-421e-8c10-e881ff57eea9", "value": "49152:akIxiCdfj11SFgM61uLLuOWqu/PxQT/P5a4GN54wzeXsBDyZINKL:akWiqfSG/ubWq0QLBaZvIlIUL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745300998, "uuid": "6301b51b-41db-4947-a794-bc4b589ff42e", "value": 2157056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300998, "uuid": "5ff3dbe3-b2b5-445b-a424-3bcf9d05f792", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7eee4ac-1f3d-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301065, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301065, "uuid": "2987a6e0-985c-47b3-ba27-12ffed941965", "comment": "Malware payload (Mirai)", "value": "fc63faf019d21b312ac3302727b15414", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301065, "uuid": "9dee8c4b-68e6-43b6-9c86-f177e3a76a35", "comment": "Malware payload (Mirai)", "value": "4c9cfbde1233c71bd2a62c8dc9ca9dcfa99c51344f7abbf04ec04883035e0b96", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301065, "uuid": "f0106cde-ce81-4bdf-82d4-57d658ad9707", "value": "T1B251A48561847F3418BBAA27F6B682683081A0539CEF7F95DACCFEE086CED147540B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301065, "uuid": "82387b12-3285-435e-9965-bf9c48d33cc7", "value": "48:vpd+70d+7N7hpd+vd+6Gpd+gnd+zPpd+fd+KWpd+1d+oUpd+71d+7o7Upd+fOd+a:vz+7i+7N7hz+l+6Gz+gd+zPz+1+KWz+q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301065, "uuid": "a0048a31-3cbd-4dc4-8d25-6d8056a75a04", "value": 2970, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301065, "uuid": "72ed0d40-7d6d-47ef-8eb1-6db99e54da19", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7f022c4-1f3d-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301065, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301065, "uuid": "ff863b47-7355-41b6-897a-70fba52a0aef", "comment": "Malware payload (Mirai)", "value": "f1638a068a07420d4195c2ad55ad6763", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301065, "uuid": "940e4d43-a4ae-428c-bcd0-65f8c250718b", "comment": "Malware payload (Mirai)", "value": "a9f18ac65cdd9697ae8daa9e1ec898c5cdb026a8ea454d1bc7e659f5c972ba24", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301065, "uuid": "db6efa24-fae4-42a9-822b-8422e3519558", "value": "T1CAA2E01572A72D65E3EC1C3DC86A8327BDA70BFC90F6327679455620C94D20A2E3CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301065, "uuid": "c040c910-1011-44d3-9049-8883f5ff0034", "value": "384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjihymdGUop5hi:vvQn4j+ZO5fKAlxus3UozY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301065, "uuid": "5a2cba6f-a5a3-46e8-89d2-2b666ead14b5", "value": 22160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301065, "uuid": "1806eabc-a72f-4d23-8813-94501226ac33", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c807fa26-1f3d-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301065, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301065, "uuid": "8656ef1a-e5ff-4ccf-903f-9fcc6696fab8", "comment": "Malware payload (Mirai)", "value": "f9e63948d7dd8ae49916a69bed1be384", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301065, "uuid": "72a854f1-dca8-473b-bb1b-49ec021a055f", "comment": "Malware payload (Mirai)", "value": "e1ff840ff554878de64c5222f5c5e3cd9aef3f87629eda4409a3771b3ee710ed", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301065, "uuid": "764a0365-5340-4946-b898-0f171ff267bd", "value": "T1D3432921B63A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301065, "uuid": "8de4f9fe-999b-47b6-9165-e09ae3dbc793", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKqgESnmC/xO+KpAwv:RqtmZPuutfbltZFBSJsBcfDSTFI+BEv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301065, "uuid": "d0393ea3-4e47-4693-bb07-5b4312a53e87", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301065, "uuid": "cf5937e7-4953-444f-ac2e-a9d9552125bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c80e8ad6-1f3d-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301065, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301065, "uuid": "7a8cb6bb-39b8-4c16-977c-a5e584671c65", "comment": "Malware payload (Mirai)", "value": "0e1c1f6bc7129138d436c586e7418757", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301065, "uuid": "ab1ede2a-d451-4c9f-9a63-31dad02f0e86", "comment": "Malware payload (Mirai)", "value": "92e2582ae2bea911543547ec2a557f785a16f691bdecd496c294b4cfeeb4780f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301065, "uuid": "ae7652bb-be8a-441b-9626-75175197fc09", "value": "T10C82CF3061AF74F5DBF14435EAED8EC6A71A0BF8D0FC369317586B38894650621F92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301065, "uuid": "98ccaa8d-3582-4d44-b032-21a894f7b817", "value": "384:MnfzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMabhymdGUop5h5lD:2dV0P6+kom0tVAoNvm+to1bs3UoznlD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301065, "uuid": "b27e3562-7755-4c4c-8630-636d66af82e3", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301065, "uuid": "834a9184-4d0d-48c1-acab-895706e7591c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c81cb85b-1f3d-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301065, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301065, "uuid": "fa978c2e-7984-4ab8-8737-4ad6dcdcec65", "comment": "Malware payload (Mirai)", "value": "e96aa59e8431aedd9386294c181e58fc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301065, "uuid": "f32b4e92-9339-4f49-839e-11f5234aae90", "comment": "Malware payload (Mirai)", "value": "a1b2791f1090b71c0cbc15172f27aa688d9c1da1b40f47bb71d647e2906b35e5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301065, "uuid": "f0175739-5610-45ec-b25e-eba6f2c69a6a", "value": "T1B9230271440EDDB125303C72EA99A79376F11AB1C6673013D6290B386F79B131E5BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301065, "uuid": "33627e2a-7430-4c29-bb9f-86783bd0ff2a", "value": "768:D/TYCoIxdEk+AxoTZAZHFeq8b3L9q3UELbUXfi6nVMQHI4vcGpvm:DECFd+A6YHAxqLRQZm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301065, "uuid": "0e2a3d8c-79ce-4512-86fa-e259ee85da75", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301065, "uuid": "5475777a-3f55-4931-80ce-7ba26c397667", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8256674-1f3d-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301065, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301065, "uuid": "f805f567-3221-4edf-9fbc-1d8ac67ee782", "comment": "Malware payload (Mirai)", "value": "7aa569f62209c72cf277d59925fd3cdb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301065, "uuid": "f3a851a2-6fd5-4c59-b06d-f4bb8ee5d29a", "comment": "Malware payload (Mirai)", "value": "e7b46c753f3add9c7d0f941189bb77b26d73f0b7a110924b6f2ef51ba8879f2f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301065, "uuid": "7239177e-73e9-47fb-b27e-6061b9f48fe3", "value": "T1B1330A8EB8029D3CF91BE6BE54164E0DB93177C152830B2757BBFDA36C721945E02E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301065, "uuid": "dccafe5d-06e5-4782-99d0-a64750041212", "value": "768:gduPBFnHooqR8qOCKq2cH4Fje+TK806MMUVjzMfQXOtHud2oGn:r/hqaJMcjeqK806MHdMfQXoHuCn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301065, "uuid": "b860d20f-e7e0-40b7-a7db-2e24381a0e3b", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301065, "uuid": "0f34d69a-2338-4cde-be01-1532030d9dc0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8287cdd-1f3d-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301066, "uuid": "dd7c1408-fd1a-4e3a-91a9-47b4e7b1f9e4", "comment": "Malware payload (Mirai)", "value": "bca91b6a1321af6565bf7a33f32c3669", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301066, "uuid": "fe35fcf6-9ce1-4a22-b9d6-46408eeb4d30", "comment": "Malware payload (Mirai)", "value": "a12d1a0428f8b8712136826c697890e0bf507dde0c37793c617fb0bede5121f9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301066, "uuid": "00ab7b83-2159-4069-8ea6-a25b38f36710", "value": "T1ACB39CDBF24702A0C8624AF007CB4BED3E2723815F27C5E72C6A657968791CF8905F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301066, "uuid": "8be7f746-2be3-4c52-9af7-ac3b83a74c7e", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg1u/LWy:c9sSyzz36YaWWgg1uq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301066, "uuid": "63e1818c-0d14-4791-9632-d3f7a9d574e1", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301066, "uuid": "e14be656-042c-4437-9ff0-4a087d65ebfd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c82c3eed-1f3d-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301066, "uuid": "33426a20-65a8-43a3-a27e-f2199ec0cef2", "comment": "Malware payload (Mirai)", "value": "7e2e6b4ffb4958ba3520140ad6654877", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301066, "uuid": "078a2095-2d8f-4a19-91ad-a311dc47a5db", "comment": "Malware payload (Mirai)", "value": "d8b958f781ee754d1f9d170365edd46115365e688fa1e7515062a76aad97155d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301066, "uuid": "63430167-504b-4930-82ae-633f7672bc08", "value": "T1D9A2E019BF1886CBC832693451E9EAD21293FC72F2DDCC092940C16FF4A33A96474F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301066, "uuid": "2f42cf95-0eed-496b-8bc7-f5f36bfe2cbd", "value": "384:Mg9Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAKn:798o08kxofBE+ZkXaqGbp2F2TWul0c5a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301066, "uuid": "f262b90c-c704-4724-8817-5e655a8e9401", "value": 21500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301066, "uuid": "8386b54f-a9ba-4c5d-8188-3fe98c03d6ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c89756a5-1f3d-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301066, "uuid": "12c5720f-4ce2-4e40-be62-62d7678e856e", "comment": "Malware payload (Mirai)", "value": "702daa063d2164d9e6b2161283465098", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301066, "uuid": "d63e60b2-c22c-4683-a570-d54f8c8d3075", "comment": "Malware payload (Mirai)", "value": "8bca05865a57db2a55faad1087645da91081cb4e403b8af566f27fe6e4c1aad2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301066, "uuid": "9bfa063f-125b-4c58-bfd9-90f5258a99d0", "value": "T19AC2D0E0B736EA31C4206C3DE52A4D8A3A51067C91FF353764158D398FC1A9B62F88", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301066, "uuid": "f3eb90db-853f-46a4-a8a6-dd3e1d341085", "value": "768:JMKyhegCCMqfizjoNpd2vJdX6vwrI9q3UELu5:OKy4qfqoeJdXWgxLU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301066, "uuid": "db20b558-6952-4db0-a034-9aa86629e7e5", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301066, "uuid": "a330c43c-4dcc-480a-83f9-7267bdd078ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8b5c11d-1f3d-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301066, "uuid": "aa888406-b06c-487c-8588-7feb9c19fae5", "comment": "Malware payload (Mirai)", "value": "553803835f230995dfe0fd03e0cacd1e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301066, "uuid": "2a5471c1-10e5-4f12-9c4a-2dcbf4f87ade", "comment": "Malware payload (Mirai)", "value": "aebed446ce4175be4203cfc34b417600fdfdb2197ecf9e158614af139d74dacd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301066, "uuid": "c32cc244-b7ce-4eff-91d4-895872f6b02d", "value": "T194B2C0CD61543084C98D7C7C278D4A665F6CA1C0BAEE9B26E350CD98B3BEA4F345D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301066, "uuid": "bc8593fb-7afa-4cd0-a92a-115c2c25780a", "value": "768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBp4EZqSWvO:4QlS07FUXqIYSXQKqu48q2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301066, "uuid": "73825847-980d-4485-b666-cd12df1f6816", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301066, "uuid": "e66c3e96-8a34-4e4b-b08a-a0b80bf90bce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8ba3de2-1f3d-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301066, "uuid": "feccbd27-a8f3-4ef5-83e9-68872fc01de3", "comment": "Malware payload (Mirai)", "value": "be36e9a75da1f2fab5f5824a9790c18d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301066, "uuid": "196bfee6-d013-45b2-8907-b6ae905ce254", "comment": "Malware payload (Mirai)", "value": "77e5ccd0b2a57fad8b677d4bd6a6596e74394c74c115e31c668878595320235c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301066, "uuid": "b906c71b-3ecb-4dec-a383-879a8ecfd093", "value": "T12BA2D025D346AEE4DFAF9D9096C2C2C2B7E547C6268AC8E340EEAF012516046B789C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301066, "uuid": "41731907-d75c-4941-a34f-3b809999f844", "value": "384:m/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C5wAM4uVcqgw05VxJR:mRxsSVsMD6xiJJE5zRWNu/4uVcqgw09D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301066, "uuid": "e6f03c2a-1171-4708-936e-878ff6b776cc", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301066, "uuid": "c01eb36d-6107-47f8-ae25-07544534a555", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8ddc0c4-1f3d-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301067, "uuid": "f8af862e-1289-4378-9b52-f8165a552524", "comment": "Malware payload (Mirai)", "value": "bc2f99db3e3b2efae98adbfd7fb1a4c6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301067, "uuid": "904c78ed-215f-4be4-9dac-dedda6cda071", "comment": "Malware payload (Mirai)", "value": "ff1e92b4bc7bd7e5e61797e990375710ec69f24db9e6288638e179769e2d95bd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301067, "uuid": "d1bf01b3-1efb-4651-845a-0d4a94d89619", "value": "T155336C36E029DED0C6560134A4E88F751F03F1C883536EBB2AE546B2645396CFA19F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301067, "uuid": "c1ae13d7-298c-49d9-8983-019b21651cd0", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+m3CZQoV/bnmCozw:Oa4U7G7SvT6ftBTm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301067, "uuid": "830bfc8b-a815-4c2e-b1fb-f5ada36b92f3", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301067, "uuid": "3e39cb48-905f-4131-897d-4060f6942e57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb771da4-1f3d-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301125, "uuid": "523ba666-2cf7-4728-9e39-2d179afb8982", "comment": "Malware payload (Mirai)", "value": "e7ace4f220e1464fd83ce5ba62a20497", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301125, "uuid": "dda1b17f-dac7-4bbd-96f7-5ffa40593176", "comment": "Malware payload (Mirai)", "value": "86c8f78a304c97f7d0c72c31cef5b5d89baccb21573c9d19d99d03c41702cb53", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301125, "uuid": "d57ebbac-c9ab-4fef-8c41-be7fc6d43ab7", "value": "T1EDB2D03C1B111B98DE1EC0BE83981B503DB81B2591829D4B6207EDD79F5B8787453B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301125, "uuid": "202f361b-614b-4947-a5ee-1fa889c18433", "value": "384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtui1mdtJgGlzDpH7uNj1JA4p:YeD8ZSWvZHZbs1row697qohQvg91itJu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301125, "uuid": "027d13ec-579c-4b92-8a13-80235bc6bdb5", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301125, "uuid": "3b522008-e13b-4b9d-a8bf-e5f2775141a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e916a2b3-294f-11ed-9f24-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1745301219, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301219, "uuid": "8a0a1c11-3545-44c5-812a-072585da1e7d", "comment": "Malware payload", "value": "ce2b4fe3c795b816fa8536afe4b58d66", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301219, "uuid": "06b142a8-c3b5-4f46-b9e2-3f72d7441997", "comment": "Malware payload", "value": "6aaf9e595044956da90505bfca991770bd2ddd2b43a6de927d00d6de949256dc", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301219, "uuid": "cf170177-abed-4dff-a5b9-e973a5b4679b", "value": "T15C130782BC82865689D813BEF97D41CD331273B9D2DF7112CD115F18B6CA94F0E7AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301219, "uuid": "5a962d25-42c1-4e6b-bf6a-3ac177336dbb", "value": "768:CMn1EjZA//+1vTRfRiOC7wYqT4JqsWA3B5d7I9ybMioW+j/LsYtXO0CurQ:CMn12A//SrRftY97WARbIcbboW+zLsY6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301219, "uuid": "21ead6be-6e10-4fae-bdd0-5e606ecdbda8", "value": 45260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301219, "uuid": "c9ec7673-f075-4921-adad-c3516b5d368c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99c1d667-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "2e9b6f96-14b3-47dd-98cd-c223ee2af514", "comment": "Malware payload (Mirai)", "value": "b3fc632e3f6f015afc9c35bd0a206c84", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "204e52e9-f90f-493c-ab9a-2b832f556169", "comment": "Malware payload (Mirai)", "value": "9c1ae77197e7557b5e73118d4d083a9f85a44c5af35a632adc3cce55f69e1f8b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "8f439819-d704-4c73-a653-88649cdebe98", "value": "T1B251ADD832AD03347FF25D62B6F698447284AAE25AC59E51D0FCB4FD068CF0C18916", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "1813d99a-e14e-4282-9bfc-4fe756f92d3a", "value": "48:v5Qgi44Qgi46Qgi4MQgi46Qgi4DwzEQgi4rQgi4SQgi4hQgi4gQgi4eQgi4d7UfJ:v5vi44vi46vi4Mvi46vi44Evi4rvi4Si", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301847, "uuid": "babf1b2b-dd4e-49b9-b443-3615b5bb6575", "value": 2835, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "f274107a-e27d-4cfa-bb0b-2700c96bb8e0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99cafada-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "68d4103f-c8e4-4a76-8c66-78533ff03b04", "comment": "Malware payload (Mirai)", "value": "368e5ac3c6377537342375100b3d7860", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "458d0f52-f2bd-4e09-9053-80522a5f72fc", "comment": "Malware payload (Mirai)", "value": "4b8f7abf1dfc76f138015b37592b5307718f0b1964c3bd721eda26d3fef89e3e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "a9758218-43df-4d4c-a980-aac0b14c250b", "value": "T115517DD833AC03387FF16D52BAF6C89872C0ABA25AC59E16D0FC74BD454CF0818916", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "2c5ea5f4-852f-4a87-b336-499eb58068ea", "value": "48:v5W4W6WMW6WDwzEWrWSWhWgWeWd7UfWfWyZ:v5W4W6WMW6W4EWrWSWhWgWeWd7UfWfWU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301847, "uuid": "84dddc59-71d7-4592-a29e-76b230cd72fd", "value": 2779, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "9e8eef6d-8e43-49cd-9014-425d9ceffbc6", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99cc87d4-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "36cbd2c0-af9b-4773-975e-04dfe3e09934", "comment": "Malware payload (Mirai)", "value": "ff425fb12b8466eb0a0a8d67951649d8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "9ee30ffa-28eb-47ae-a6c0-175e770deaf5", "comment": "Malware payload (Mirai)", "value": "934c9839abbe6a52f1648f4d8f8a32a8a8edac8b6957c95c414d376e7eadbd34", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "e276edf3-c997-4b2d-8e34-15e0e08b63bc", "value": "T1FF51A2D973AD03347FF15E62BAF6D894B280ABA157C98E15D0FC74BC494CF0818A16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "b16e1620-1192-423b-a614-4b679eee3241", "value": "48:v5B4B6BMB6BDwzEBrBSBhBgBeBd7UfBfByO:v5B4B6BMB6B4EBrBSBhBgBeBd7UfBfBp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301847, "uuid": "975ff588-01b4-480a-814d-2e1081995011", "value": 2849, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "7c360398-b859-41a6-b5d1-9231f1043449", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99d5c89f-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "ea129c35-c0f7-4ef3-8f3b-4092bc84f0a2", "comment": "Malware payload (Mirai)", "value": "45f30bc0c3c1ac0768ca4c6a3dfb2327", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "2c96b820-a4e6-4d35-89cd-f2d57750122a", "comment": "Malware payload (Mirai)", "value": "86affdd5d6fba82ccca9481e9d9af2e6b08a15904d4bfae0e362bf1f6590ed3f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "c0d0bdf4-e1e9-4e7d-9cda-412681a30b85", "value": "T16CD2E1ED32B6512DECAB57779B3F020AC4829570524CD3A6D393E74FF21A129DA01B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "89383606-26e7-4cda-b8f6-18767a910954", "value": "768:WPUL8GrebgX7cpQfmYK50uHE7SrwMLxqkPduG8c:RAGrequQfElrzdB1uk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301847, "uuid": "f06b7610-4e3c-4b48-a293-0ce1e848f8db", "value": 30356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "d5ba6093-f69c-41ea-8494-8b65d4ecfe36", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99e3eb01-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "30ff44ac-3f1c-43a0-ba3c-f976a206532f", "comment": "Malware payload (Mirai)", "value": "e14ce1c940dff9b79cef01b3782d1eab", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "4aa6966c-c964-4b1f-9a4e-9a11f8a7231e", "comment": "Malware payload (Mirai)", "value": "31b4e3e0238c02f3e445822e328b580c3dcd867e992024354dbb69d5345b51f3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "b475848f-634c-42af-ae27-4c06630d7597", "value": "T157911B9D739846346FE45E15B1B9E426B514AE758DD24A40E1ECBCFC781EF2C0C282", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "64831955-bfac-483f-8a21-772a1f0b0c8e", "value": "48:HzPG4pGYGGIeGcuGIlGcyGs3GwvGYzG0AGCgGA1GIMWG65Z:HzOZ6uOjGBhtaA7l5G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301847, "uuid": "5aabeee7-e8be-4437-971f-f8864f5a15c6", "value": 4602, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "f2547db5-9881-4087-86bc-04c0cce06dfb", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99e6c9e6-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "665490c5-915e-406e-9d57-e80442b09deb", "comment": "Malware payload (Mirai)", "value": "92a673ccfd1b4eab57faf4ad1b85bfe3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "8a1d20cf-6249-4eed-b934-b53c5811edc6", "comment": "Malware payload (Mirai)", "value": "57eefba91e5cc910bb26ca7752bfe2d3507519bbff8000555839bd37c0da424d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "09eca934-dca7-443a-b5bb-e1163bcb09db", "value": "T1B151ADD932BD03747FF15D66B6F6884476C0AAA5AAC58F11D4FC74BC054CF0818A16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "8b500101-368b-4af9-aa46-0fb264fbaf89", "value": "48:v544464M464DwzE4r4S4h4g4e4d7Uf4f4yb:v544464M4644E4r4S4h4g4e4d7Uf4f4u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301847, "uuid": "386be33d-f256-4f66-ae56-13bd6274fb55", "value": 2835, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "69e33345-f66f-44a5-ba18-f05b81ca13ce", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a038282-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "2495ee41-8cb6-47a9-8121-830fd8e8a364", "comment": "Malware payload (Mirai)", "value": "fcc54e3ef440a4682e65aa47222afa8e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "7d3cf126-9b34-4efd-b9c1-5eb29aa4a1ff", "comment": "Malware payload (Mirai)", "value": "7871095e440f45987421ac20573bf6835862cc68f0110f0d02b1253d280b355c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "23febab2-9a35-43ad-929c-6909b52f73e6", "value": "T155519BD832AD03787FF15D92B6F5885876C0EAA16AC58F56D0FC74BD068CF0818916", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "3c724418-d315-4fd1-93ef-2d5fd6d8cbbd", "value": "48:v5Uo4Uo6UoMUo6UoDwzEUorUoSUohUogUoeUod7UfUofUoyUL:v5t4t6tMt6t4EtrtSthtgtetd7Uftftb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301847, "uuid": "764c2c43-3398-4a12-b582-8f3e21df5b39", "value": 2807, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "9a6bd612-c386-4a54-bf6c-46be04e4ff8a", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a09cb48-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "f63d9158-67e2-4a29-a62f-8f8bf159875f", "comment": "Malware payload (Mirai)", "value": "f86f4d0f90a26cfcf17f4c3172dbdd7f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "868609a4-1b3f-4bc4-9896-79cb126b64df", "comment": "Malware payload (Mirai)", "value": "604ac822a8c8ceda56b8b63daff8273ffc053aa9cbe18795e7b3f4a61aa200e0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "7cd1ac9c-c2b8-4b46-bf4a-b3e9825401b3", "value": "T164E2E12006B07A70ECB810F3AD7648D36B17C7FC5EB672369880493CF98166D15B49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "ee727ec5-bde8-4b95-aa29-91dce7f094ce", "value": "768:UKnnrVtULkHnVB59pvhvXbTq7wvFqkJSY8+E0s3UozR1:nnrVtULcnVVXvv/JSY87RzR1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301847, "uuid": "03419470-c586-4553-b93b-dab1876d3bd2", "value": 33088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "e45fb85c-31b3-4e06-a8d2-2417c4072c8c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a0bf5d6-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "11b07cc8-7949-4a62-8918-adf40a601a74", "comment": "Malware payload (Mirai)", "value": "b76365cbb8f02c2ee45ceebe4a8581db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "1b34ec41-f426-4312-9065-610963d4c8f6", "comment": "Malware payload (Mirai)", "value": "e5e48e7139e60e57d0febd736c76d61b8aa99d81cc8bc69bd7d62b4899ed4516", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "aea76960-40bd-4d54-8086-f3b7310548aa", "value": "T1BD639E64F1A49CB5C95456B8A69CC9788312BC3434F73CF1DFCD868884A7BEDB089B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "3cc9ff3e-ec0e-4b24-a7ee-2b6e32d2cdd9", "value": "1536:2h3/XFFexI7Hs801EVisZG9roMQgscSeWHhQN:2h3/XjmIjs801EVisZmYEs6N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301847, "uuid": "a722a30a-f25a-4f04-b24d-b682ddcd74e1", "value": 71476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "73c0f0b0-be86-453a-843c-172f65d6598f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a189b13-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "79af5aff-d65f-40cf-8ca1-2549e9c357e1", "comment": "Malware payload (Mirai)", "value": "5bd3a86e7316d90b6c0208fd46cef8e7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "2b5a7429-7ffb-4e3a-9eb8-88bab52b9b4a", "comment": "Malware payload (Mirai)", "value": "7938372eb2e1d473b62664d61f18d76514bc5e948a1670ac0fbd5243c5f2e295", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "116fc861-1267-4472-a0f4-8e7546b0af7a", "value": "T1E0F2E03076D57973C6F11C72F9A5008B95139BE3D57D30920643496C7A924229EEAE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "ef51e794-c707-4179-8e2e-b65e5efff1f0", "value": "768:WpYa/S5+cAN/gRq75IvhZ+0lxyaV0qbmUm9q3UELx:pj5+c+wFv9uaVs0Lx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301847, "uuid": "a3c89aeb-9325-47b3-8742-cd889f58fc10", "value": 34576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "8925b5a7-db0d-4aa4-b721-69e476105937", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a20c10b-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "0a33a062-f2c2-4c0c-8909-1214b3e046a5", "comment": "Malware payload (Mirai)", "value": "7a0d4cda14dc0b1983a6d8be01107f02", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "c4216466-3a54-4b1d-bf1d-89aa1c69f086", "comment": "Malware payload (Mirai)", "value": "2010bb91cce1b657675a25bdcc2946713e1da9957a548b50e8e3991f517a602f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "7102318a-53dc-4d46-ba1e-dc4e4e55a37b", "value": "T175835CC6F400DEAEF5CBD67A4C630E1CA571B1A44A630B17A753FEB7BE61098280ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "e9654e98-ad6a-41f3-8abc-4ffeb26fb1a7", "value": "1536:ohQ1BVP9bhPmWtvDw7gIew3f8yKaKQeuacWjcW0JcWcBC8QFv+PYdv84OG:ohQ1BXUcKrKQeuacWjcW0JcWcBPQFv/b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301847, "uuid": "4c58e87b-7213-4204-a465-112dc3879e93", "value": 86380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "57529401-e8dd-48f2-96a1-359d65416fff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a2157ab-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "2ed46dcb-34c7-4696-8a24-5f115aab7a84", "comment": "Malware payload (Mirai)", "value": "98d1f2fbb2642221ffb905908eda76f0", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "e74b6c62-4710-4719-9e1f-77578aec2aed", "comment": "Malware payload (Mirai)", "value": "38ecaabd363117c3212f4589bdd5f9cfbb45a34d267ffdaafc7c90c33431987a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "c9f1df76-7a3e-4ddc-875b-014f688852d1", "value": "T138515AD833AC4338AFF15D52B6F5885872C0FAA15BC69E16D0EC74BD494CF0C18916", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "554af11f-67af-4ca0-9855-25dfb5848638", "value": "48:v5KN4KN6KNMKN6KNDwzEKNrKNSKNhKNgKNeKNd7UfKNfKNyKa:v5KN4KN6KNMKN6KN4EKNrKNSKNhKNgKj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301847, "uuid": "8abbe239-a897-4fc4-bf5b-8a89a447e83f", "value": 2807, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "0e8f60c2-fee1-4fa1-80e6-954c01fc8c2e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a248d9c-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "36f7a01b-25ce-40c0-8d58-557259adb132", "comment": "Malware payload (Mirai)", "value": "2a99663a0932f7ad45c74e78abe7ec9a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "22872898-0bec-4a72-95df-90b98e2572da", "comment": "Malware payload (Mirai)", "value": "3699c39df148d4571b29ede8d4db364083ba4d60663b44277f47c48f5574dd92", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "5cdcc5c2-d426-4db3-b249-a7ac665aecf8", "value": "T14AB2E12642D3B871CD300933B6DD07465ADA82BEA8B6BC7359185D353EF5CC728981", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "94790b20-6808-4bb4-a68c-cb54c826daa4", "value": "384:tyCE4rkx1gtv43QrDs9DVCpU9wUI4BeG89io0gEKxbIx9+Dv0V9Zh7qmdGUEpia0:MCqMtvDaDVSUjIth9ioi39oa9Z9q3UEQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301847, "uuid": "db870dc8-ab99-4a34-a8bd-be3f43a443a3", "value": 23888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "e3adb999-1e11-4736-89d4-924e1abc885b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a38d81a-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "b76d94bc-9b82-4eaf-b704-6005608c85d4", "comment": "Malware payload (Mirai)", "value": "bc7ecf5711bae7862fbf600fca98fefc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "eb607570-b7c2-4b13-8137-71ab32a7dbd0", "comment": "Malware payload (Mirai)", "value": "c64dac21be981ec66104063a1ab9429a622fad82d020266ac0b596f03e87672c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "551b0b1e-e1f8-4721-9932-d6e9f0e9f20d", "value": "T112D2D1D7537FF630C97AB931C0871684FEFB782D18492A3FC6E462BE58295487749A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "a77a6162-3ee2-4d37-8de4-e05fe3e4adfa", "value": "768:0p3NzxIdWOIZr+5f3A+vAr9v5c3tI22yRBx0qi:0p3NzxIdWD+xde152tVHHi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301847, "uuid": "7e9ad256-76b5-4b04-a286-1681cf02f4a6", "value": 30388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "22b5d26b-5cf8-4039-9857-9a30472cff29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a3ae5e5-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "4f875f4f-b956-49c2-aced-9bce61d7d4e2", "comment": "Malware payload (Mirai)", "value": "a399e44d14f6807825dd235528986844", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "c8c3b1a1-9a81-4db2-aab8-06e1da64c1b2", "comment": "Malware payload (Mirai)", "value": "dd47367a05e1f50b2d5b2076834894f76912a50acaab8a402db3efdc9916e722", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "bdb490c1-8dab-4454-ae35-26d88f60dc67", "value": "T11F5191D832AC03387FF65E52BAF689A476C0ABB556C58E55D0FC74FC094CF0818A16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "c502e064-74c3-4b9b-a904-24b3fc118aaf", "value": "48:v5HW4HW6HWMHW6HWDwzEHWrHWSHWhHWgHWeHWd7UfHWfHWyHZ:v524262M2624E2r2S2h2g2e2d7Uf2f2+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301847, "uuid": "d840ce35-05a5-48a7-8ce8-47718a3e2559", "value": 2793, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "33287517-ce80-4ad8-a709-29a0aa01633b", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a414b33-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "7a858eb0-9a2d-4a74-8b97-c8351d01652b", "comment": "Malware payload (Mirai)", "value": "e2ff79febc6f2611655c64b898f5e7d3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "9ae91b36-6b1b-426e-866e-59f31b3cb2ad", "comment": "Malware payload (Mirai)", "value": "c2c5bd205ca337732c6df1c915b119fe102c5dfaeacb5ffc101fb466c4b0e2a7", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "dd2bbe1f-2abe-412d-9440-8ca35bd00988", "value": "T115517DD833AC07387FF16D92B6F5C8987280EBA15AC59E26D0FC74BD454CF0819916", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "d5053c16-07af-414c-b8dc-bcf65a943e53", "value": "48:v5S4S6SMS6SDwzESrSSShSgSeSd7UfSfSyl:v5S4S6SMS6S4ESrSSShSgSeSd7UfSfSy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301847, "uuid": "098d1516-2e6f-4318-87dc-5ad750608105", "value": 2793, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301847, "uuid": "a261a41a-b4bf-45d9-bf80-7ea57962c5da", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a450f7f-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "6103bb89-fcf7-414b-a75a-ff4bd5b76b47", "comment": "Malware payload (Mirai)", "value": "88769d6c295d10907a671b4e2ebd6d18", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "fc43475c-8a11-41b3-98a8-889497926fb9", "comment": "Malware payload (Mirai)", "value": "8aa2f2e3c5f94f88d847c62578b345d4015e506eba3772e9d1c80601e7676f8f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301848, "uuid": "480c9d5a-f1cc-4dae-981d-52d039c6ad83", "value": "T1CBC35A212A391B26C0E0A53A01F78336B6F71B491A71620F7E655F8D7F25BE032573", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301848, "uuid": "80122f3a-7faa-4fb7-8067-19d37a690d8f", "value": "1536:2YiIZoa5Zx/ZRPCdJVC8jMjd8rzebalUmwSscXJ6z6WWM+ed/vvfGNQydbWC5:3PCdJVa5XbAsccWjMpvfGN15", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301848, "uuid": "f7a5b1bb-0362-46c2-a5b3-8019450224f5", "value": 120077, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301848, "uuid": "a072c4ac-dceb-4c0a-b747-fc2f8b3d850b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a566b6b-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "b19ca6fe-71ac-433f-882b-4dab8f6ed455", "comment": "Malware payload (Mirai)", "value": "c465a11e70a0f46eb9670c7d1bef06d3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "acbd96b3-72ab-4eab-a9f6-3119e52fe02f", "comment": "Malware payload (Mirai)", "value": "a12a05affe30ea072502677a4ce3afbb5c65e3972b267e2504cc338027572b82", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301848, "uuid": "688af8a4-6f52-4049-9166-0ef8dbd98248", "value": "T16F519DD932AD03387FF15D57B6F5885476C0AAA25AC58E16E0FC74BC098CF0818926", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301848, "uuid": "d2fb8557-8076-4b64-840d-41b990ad4c25", "value": "48:v5o4o6oMo6oDwzEoroSohogoeod7UfofoyL:v5o4o6oMo6o4EoroSohogoeod7Ufofoe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301848, "uuid": "cb5b380b-aca5-46f2-bee8-dddd6d686f79", "value": 2835, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301848, "uuid": "d5142c31-c4f6-49e2-b2df-4a971a5c4486", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a57eefa-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "ae816a4d-37a4-4b7e-b8cf-97f82b1cdae0", "comment": "Malware payload (Mirai)", "value": "a4d32788823629e8470b287b85715056", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "1697217c-7466-40de-a23f-5c5964cb4e52", "comment": "Malware payload (Mirai)", "value": "8da19441ec9fa34d1b69283419a58c2ca7b29e469f37f2fd1cb50a9d45e1fda1", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301848, "uuid": "e94d4e8a-32c5-4c7b-9d2f-19c5dfaaa661", "value": "T185519BD832AC03397FF16D92B7F599587680EAA16AC58E16D0FC78BC058CF0818916", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301848, "uuid": "2c370287-67cc-46fc-ac7e-147ba682ae96", "value": "48:v5c4c6cMc6cDwzEcrcSchcgcecd7Ufcfcyf:v5c4c6cMc6c4EcrcSchcgcecd7UfcfcQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301848, "uuid": "488513cd-8404-497a-a6a6-0e45ca08e5a9", "value": 2765, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301848, "uuid": "1cc66a08-4f3f-44ed-9a16-96eb2cf7d231", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a66b504-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "33ebf567-f976-4c33-896a-5ed2f4e4c2dc", "comment": "Malware payload (Mirai)", "value": "352ff753cefc7475672d9807f2a28aa1", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "dc3b174f-7cdc-4322-8e7d-fbab40c58491", "comment": "Malware payload (Mirai)", "value": "114482d83cbd5399bb7a8db1f5bc4890a3c398eb353af6ec0cdd46e6172a7ed0", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301848, "uuid": "492b2847-c335-475b-981a-dc8088e15913", "value": "T18151AED833AE03347FF25D52B6F6D8947280ABA19AC58F65D0FC74BC094CF0818916", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301848, "uuid": "8adbe484-bcdb-4d72-b015-e272c8598b92", "value": "48:v5g4g6gMg6gDwzEgrgSghgggegd7Ufgfgyz:v5g4g6gMg6g4EgrgSghgggegd7Ufgfgc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301848, "uuid": "166ba7ab-a660-449d-a36b-88fbcd555c16", "value": 2821, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301848, "uuid": "415f2958-44db-42c1-982d-1d7ba7697f79", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a81c582-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "9e58a3f6-2966-4787-aec1-0569d39bf56d", "comment": "Malware payload (Mirai)", "value": "2f4723769caa4d130f42dfaeae073401", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "45290121-a720-48b2-8081-cdde10fdacf9", "comment": "Malware payload (Mirai)", "value": "23ef258445bab45f2d626ba7cab4f6c8a84ee990424f541a376185e137344bdb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301848, "uuid": "3f94e6c3-d3ca-4e7f-85f3-b8d08b64fcb9", "value": "T1C7E2E199C9CE1C52DB7F5FB01C6783C0B7A02F8E7761A8E2B254D6F00653A2D5745A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301848, "uuid": "bce0f37a-e4b4-499e-8e0b-afddb56fc2ec", "value": "768:3tVKqEUTDl6NbNJerR08QerE3fi2MzJiOb3k4uVcqgw093:biNbNAlY3fi2QJt3k4u+qgw093", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301848, "uuid": "4535556f-b9d8-42b7-985e-75fee9387c98", "value": 31420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301848, "uuid": "23f70037-8f91-4ebc-8548-a374b9277ff6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a896d74-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "38bff93f-fa76-4d92-961a-9c5215ab8390", "comment": "Malware payload (Mirai)", "value": "58f2e630acf0c3a7d220fb2da70d7a9e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "5f54df63-3769-4638-93e6-34b843da1d1b", "comment": "Malware payload (Mirai)", "value": "4a353073494691d0e34c487f1b3a31c4cb904a288d38beb643a1e3e646480e34", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301848, "uuid": "aad21f91-90a1-47b3-a005-e804e9684af5", "value": "T1A4F2E1BC1B565BDEFA9288F8479243912A701E81D4475D4BBAD4D843CEDA01D3DA3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301848, "uuid": "86e20447-74f3-4535-bb5c-f04047c61a03", "value": "768:016f8W85akr1whN6sfAE8Glo9uLRnVjy1w92HeF0AhxDCn3oJgGlzDpbuR1J9:01W2r66zE8Fulnh92vAvDS3oVJuX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301848, "uuid": "51dfe82a-592d-49b6-a17e-a4b6e133888d", "value": 35512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301848, "uuid": "9c9c8f72-fa21-4429-88f6-ce9f4fc02111", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ae4836f-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301849, "uuid": "b1b61e19-293d-4b3b-94a4-f37e5fcfb604", "comment": "Malware payload (Mirai)", "value": "6dc87bdc4fb50dde3e63f828593ba9f2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301849, "uuid": "96e4287d-211d-4fb3-a66e-d0e8f248867e", "comment": "Malware payload (Mirai)", "value": "d9c2d08ed5d67d944951e026cd4f5473e84d06b08a913bab46804cab544ccfe2", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301849, "uuid": "ce647750-3aa0-4f19-99f7-ab43c5ee0381", "value": "T103519BD972AC07387FF15D92B6F5889872C0EAA16AC58E16D0FC74BC058CF0828916", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301849, "uuid": "6c49f70a-77a7-4ff6-bc9d-4d787389c1d5", "value": "48:v5a4a6aMa6aDwzEaraSahagaead7Ufafayd:v5a4a6aMa6a4EaraSahagaead7Ufafa8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301849, "uuid": "70ca9737-311f-4fd6-bb02-a9d020a2093f", "value": 2779, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301849, "uuid": "4c245693-fa20-4884-8e9a-fa47a7343a9e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcc9d560-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301905, "uuid": "d3c428f2-0691-448d-b5b6-be815d5d03c2", "comment": "Malware payload (Mirai)", "value": "e8a58f58f845bb905c8351918f046bb5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301905, "uuid": "d95ad8a2-4ea7-4966-92fd-f332c9c8d109", "comment": "Malware payload (Mirai)", "value": "f99c87e396049c3c26ed3015c5b5664bc8a6dd198e8b7e39d7254b8e13186fb2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301905, "uuid": "d52b3cab-fd20-46c4-8dea-c69d94671839", "value": "T19BD2F1F42FA40B17FB1012F31A68876CC106E6ACFB4A60DAD8E69119D77B09D035DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301905, "uuid": "568319cf-d220-4eb5-bdc8-27dcacfcee02", "value": "768:zJlJ8UIgdtrmlbnrdV2g2dtfLYOfbwSzUO1:zzalAdSbn5V2JdN9t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301905, "uuid": "d73d3a2d-a12d-4e24-a6ca-febea2d4882d", "value": 30664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301905, "uuid": "403640be-8916-4a25-b906-827c6c52cc38", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bce23773-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745301906, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301906, "uuid": "b0c0fcbc-51d6-48bc-9cd6-0aad85097a77", "comment": "Malware payload (Mirai)", "value": "e36bdda7f86305dfb90ee4048332f417", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301906, "uuid": "361884d0-474b-4686-92a6-799d9cfb4fb3", "comment": "Malware payload (Mirai)", "value": "252d3b883c5d9d5344e8cd8d80bab71fee091aa65303684cd727cb92aed7d78b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301906, "uuid": "72c8e24d-c243-4a50-a9f1-8abe1cbe7f70", "value": "T1B2F2E29F53C5E80BC96D5C7FD0CD476BE84CA281E47BC7CE6B11448025556A7E02E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301906, "uuid": "f316802a-6a8a-4227-9139-4285a835b7dd", "value": "768:/iGfEHk1R7TmWRU/9nS7P+GE/WpLkqc0pWD:/dEH47w/NS7P+R/iIqC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745301906, "uuid": "0804d1e7-8ee6-4c04-b9a2-1457f3391e56", "value": 35684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301906, "uuid": "2816f292-d737-4c8e-8042-c69be8c7671a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "feb993fa-1f40-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745302446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302446, "uuid": "21f6f130-cd4e-4d37-9179-49a4c6ddb1f4", "comment": "Malware payload (Mirai)", "value": "eee9e22856ad1f4a749ff36978e2304c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302446, "uuid": "02d36f52-9965-4692-9048-a2b44201512e", "comment": "Malware payload (Mirai)", "value": "f96ba516781fc7bba4ca1376ec243b38daaacde386a2b88044912f4e9d7e2872", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302446, "uuid": "9e58e146-193e-4561-92ee-0a020e760d42", "value": "T120334B01731C0A47C4676AB42A3F17E093BFE99120E4FA88650F9B9A9271E3745C6F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302446, "uuid": "7d9ab437-6b6e-467c-ac00-7c3d584a8143", "value": "768:gOb+Ek5uRGLUbRl4UaFFM57Vs6cUjT9fB4zLZLK509ku4Fw+t/mHIuJ:X+l0vbAlFFO7+691fCzQ509/9+ZmH1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745302446, "uuid": "b6333801-d77f-4773-8310-719b8bbdacd4", "value": 51736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302446, "uuid": "7955dab3-0f8f-45e4-b876-b899831b2786", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fed20196-1f40-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745302446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302446, "uuid": "953708ca-0b0e-472e-b436-6f57365ef82a", "comment": "Malware payload (Mirai)", "value": "e2a2865a1f58b0b54c9b3957c5f09fc4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302446, "uuid": "68bd3ef2-8598-4740-b50e-c798a0e3fbff", "comment": "Malware payload (Mirai)", "value": "15d4144aece6986d54b5e941df2c4dfd92270a83574dee1cf5a6d1409e87edf0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302446, "uuid": "94c31097-3014-4e81-bf6f-16f89feee9b5", "value": "T120435C21BA361E17C4D1A8BA22F30764B2F2479E25E88A1E3D710E4EFF70A4075576", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302446, "uuid": "56368998-6280-4bbd-8779-e1ed21c772a3", "value": "768:CPoKsq99OUMwhHVQT0WFOv2oPjUcfDO+75VMYB4bze1tKEINK:CPqS9BMwhHNW4eoPjTP75VMYTt9f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745302446, "uuid": "0d01d0a0-2ae6-438a-8cec-ab2ac2b3a460", "value": 56348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302446, "uuid": "ef5a63e2-7199-45df-a862-c281bcacd5a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fee7d2c6-1f40-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745302446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302446, "uuid": "4453c5f6-e4d8-475f-b664-45bd5adccbf9", "comment": "Malware payload (Mirai)", "value": "abd59849795c71b6ea31abf8d7931bb0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302446, "uuid": "08336c5a-78ea-4893-a1ea-f784d971d5f7", "comment": "Malware payload (Mirai)", "value": "848beffd03872db6c6c4ca207c6543865a8cfdd618c0cbadb777ab13b00cb9f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302446, "uuid": "8a20039b-6ba3-4586-9d2b-42f4026d4dfe", "value": "T186332981B8829613C6D412BBFB6E418D376657A8E2DF7317CD226F10378692F0EA76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302446, "uuid": "7f3eef64-8aa1-4255-872e-c9a159a8fb4d", "value": "768:TUK+UWDDGXqp2j+Xe8Iidld0yE+9zGM3YBl4Zl1M+2ovz0BYavM3w6g7W9vjVWBI:YYWHGXQ24d0yd31Vv6e3R9LEB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745302446, "uuid": "c0dbbcb6-2ec7-436c-a587-849510b1fca7", "value": 54888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302446, "uuid": "1ebb5a48-542e-4fca-a395-3a7a5f01bfa8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fefe6261-1f40-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745302446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302446, "uuid": "e98497f6-2d2d-4171-8749-7dd799192d1e", "comment": "Malware payload (Mirai)", "value": "7ac962e86a9f4c84c5f6c964061a0fc0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302446, "uuid": "5245283a-04d2-4c92-a068-6ee99190f205", "comment": "Malware payload (Mirai)", "value": "883c5084e7d3135fd2b36726e59bbec539123def8e114ab4eecbc1cb59a684f5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302446, "uuid": "9929f0e2-ce9f-4bcf-9c00-70779eb98b89", "value": "T1E6F33B46EA808B13C4D6177AF69F424533239B64D3EB730699287FB43F8679E0E636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302446, "uuid": "559b1b64-0556-4838-bdb5-8d31fdb88f16", "value": "3072:ueA27/Q7007aCOiuM1pw63xrhWyl0WcV/GeiM/93rEn9z+:ueAIQA07aCOiuM126TWoBcV/GnM/934o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745302446, "uuid": "fade862a-c831-42d2-a00a-3464161f655d", "value": 157306, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302446, "uuid": "d779de1d-8a5c-4cb0-be39-c0bb7344e235", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff0af057-1f40-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745302446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302446, "uuid": "51f6ea57-96b3-4095-81d6-92e5374402c9", "comment": "Malware payload (Mirai)", "value": "ce9f7f8484453b5ca17e169d989987a1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302446, "uuid": "2f7638bd-ba93-483e-9843-ab089e9e525e", "comment": "Malware payload (Mirai)", "value": "1155242820d4d7ad6276c2ad31c072042363f525863e9d26ab00ef101c2f5896", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302446, "uuid": "2947bfb4-f1e4-4268-b968-947c2a88fa22", "value": "T1B7639DA3C9396E98D1A891F0B4349F745F23A11082A71FFB0E95C1759087EACF6463", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302446, "uuid": "2033b56a-c1b8-4917-9948-c635854fdaa4", "value": "1536:1atwtVAbFF/lAKfL2GpeKR58PNmUmiCX0D+OPASiL:1qhbn/ltT2GvRumUmix6s0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745302446, "uuid": "59992a80-8774-48d6-8b9a-263eba22e19d", "value": 67072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302446, "uuid": "18418c80-f261-4a9f-b6ac-60abce709199", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff62f104-1f40-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745302447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302447, "uuid": "608103c0-77ba-4abf-b14e-6e641d32c2ca", "comment": "Malware payload (Mirai)", "value": "effdc7baf1d39f479f7d3b11bf3c8b1f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302447, "uuid": "f397bdc9-3365-4bd4-9ae4-f43a6e8a4105", "comment": "Malware payload (Mirai)", "value": "4cfba2f4fab5737f060d56768464c107887832d99b40d7b66cde65cb8fbff880", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302447, "uuid": "f8ea6495-fc3a-447b-9046-041a37a3da97", "value": "T144735B17758080FCC29DC174576FA63BF6B3B17E1235B26D17E0ED222E99E205E2E1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302447, "uuid": "b5a7324d-2357-4a92-b246-aff28a2fb112", "value": "1536:KCy7rRwCMo01sMQ85CJiLBwIbuLxPFwVzMNAhwknl67mBnFkbr4:/y3RwCMZ1sMpKwBwIb8NweNAhD67mBF3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745302447, "uuid": "794f71c7-d0e1-4ee5-8f37-b2e3a4d6bcc4", "value": 75920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302447, "uuid": "3321e1fa-c141-44a1-be23-b2198c5cc2a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff793f8f-1f40-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745302447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302447, "uuid": "5700391b-b52b-41bc-9c7d-c2ee05e8b8c1", "comment": "Malware payload (Mirai)", "value": "0d9093af3d5d3384d29f2e65981939d8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302447, "uuid": "31879e8a-70de-4eb2-8f55-d414fe8d25c2", "comment": "Malware payload (Mirai)", "value": "066ae124773ef35f036c83eb33db30a8cce9f1d873adfcbbcd0299d10f1cdaf5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302447, "uuid": "3316a529-0efa-4763-8b19-35097bf8f32b", "value": "T13A5349C1A683D8F5F92A01315137A7364672F43A117DDB97CBE9A83AFC52900EB163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302447, "uuid": "68a07893-77e6-46e1-af31-9fa24ea0cdec", "value": "1536:+/BP79FId+9+N9/pg3OvbUzHS8dPv8Cfhd7cMYCSwsr:+/NpFId+wbSwoTSmvfj72", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745302447, "uuid": "0706b4d5-5d27-410a-a414-cf98e63c6ccb", "value": 62772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302447, "uuid": "710a68e8-49f5-44c2-9371-823f11b928ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff8fc758-1f40-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745302447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302447, "uuid": "1e17fb3a-c367-42f9-b0f8-4dfe346e0889", "comment": "Malware payload (Mirai)", "value": "b51edec11375250c9b50126515e3ba03", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302447, "uuid": "373502c4-56c3-4f26-b4d7-747017c2d049", "comment": "Malware payload (Mirai)", "value": "cb72535d8a83274bf86187c3df0eac3179662834ee5624f8c1c411e57a68548b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302447, "uuid": "58489ca5-7172-4a8e-a6b5-475aaaebb0ad", "value": "T1E2833AD7F400DD7DFC0ED77B4453090AB671A3A256831B3A6367B9A7AD321B40926F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302447, "uuid": "b262510b-36e4-4d1b-b637-e764ae644e82", "value": "1536:x4Zn912Jo0Mf8J6o8MypxkcN3CB9R4g4TT7bpHvBylcUkRH:x4Zn9SRMf8J6aypxklBf4gGtBylneH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745302447, "uuid": "be79384c-fbd6-4784-9deb-fc87902e312e", "value": 85244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302447, "uuid": "04f74331-8df3-4280-8371-0e786afa2baa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff96ad34-1f40-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745302447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302447, "uuid": "adc0e65a-8da9-4c62-9f72-d1dfe97e1ea5", "comment": "Malware payload (Mirai)", "value": "6a6d95ce2d05c1c7ec573ccf90ac48fc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302447, "uuid": "52bad45d-2e06-483d-a85d-e0adcf6c8c86", "comment": "Malware payload (Mirai)", "value": "38aa53f587d7a9b0b6710830a01513b2bf1d0e65f0adf1909d88e23a6058f6ec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302447, "uuid": "81d92a28-261e-446e-8f6a-0394c953fe33", "value": "T1D3434B57B98080FCC18EC2745B3FA636E672F07D4335B26917E8E9226E95F704E2E0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302447, "uuid": "63772708-22db-4320-8aa0-d8ee08b85c69", "value": "1536:K4wD2cRvuJvf7f0PLvjU+kPXiYDTHtzd40vf35OfRe:pwD2cRvuJvzf0PLLMviYDDty0vBOfRe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745302447, "uuid": "6f885655-1507-42c8-8f0d-45720bf90e15", "value": 59264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302447, "uuid": "8dfbc264-d4ee-44e9-95ad-ab9404400bfc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "224f17c8-1f41-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745302505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302505, "uuid": "7e39956f-d197-4886-9e05-1906d853a163", "comment": "Malware payload (Mirai)", "value": "06a71b1cf1649b4bcfd34cebae6e53e3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302505, "uuid": "731f877a-34c2-468c-9a2b-86033142231d", "comment": "Malware payload (Mirai)", "value": "f8b7df35ddd8f7232108c08ef6bcfce387eabb5e02a967b31efd2f4c8128a110", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302505, "uuid": "2a69bc17-e5e9-4294-9941-a4ecad059a7c", "value": "T13A732B95BC81A613C6D022BBFB5E428D372653A8D3EE7307DD256F20378785B0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302505, "uuid": "26aa482e-861a-49ae-82e9-0811c45135eb", "value": "1536:qK8sL0ckye7LGxs4AxRYyH9wuOcqcX+w4r6NxLhSiL8:qK8dJLGxsvYydoNdroh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745302505, "uuid": "45790bb5-e4b0-4a09-8015-57cebe4d2287", "value": 75268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302505, "uuid": "b75b3cac-ea0d-4427-b6c4-d82dfc782457", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22542b9e-1f41-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745302505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302505, "uuid": "e8a08da2-1891-4502-82ea-baf0bddc69de", "comment": "Malware payload (Mirai)", "value": "07e7eaafba6b0a5de0856bc8be617104", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302505, "uuid": "d28bd13a-6ae4-483a-be34-e614c22a9032", "comment": "Malware payload (Mirai)", "value": "2da28f5367c8a1ff96ba6f9be76767e7a7284b19cb63ae8e369ef9a536166814", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302505, "uuid": "97c5e95f-da49-489f-9b4c-e1b628fa9760", "value": "T18243391BF68180FCC29AC274573AB23AE57771BE0239B2F573D4EA176D86E614E2C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302505, "uuid": "e26ea5ea-1190-4075-985d-9006fbed64e7", "value": "1536:KxKtFALhI11z7vFQu3l+6wGAY9LPeR6vopRzfcMr+Ri040:XtI211neY+6rAY926MRzl+Ri040", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745302505, "uuid": "db83f00d-e0d5-4acd-8465-d627bc1ea86a", "value": 55168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302505, "uuid": "9784cae3-9ed4-49c9-9fdd-fd222ec7f41b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2256eedf-1f41-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745302505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302505, "uuid": "382758ef-8b2a-4563-8637-d6b7cbd1a864", "comment": "Malware payload (Mirai)", "value": "0240c5a1f2a37ce1befc34be1ade7fbb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302505, "uuid": "fca9b3cd-ca2e-4c6f-b2f2-0f511252e52f", "comment": "Malware payload (Mirai)", "value": "be2c889a1fa73c1d314889716f68a1d7ff656ca54c0ecbe93818de12ee44c58c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302505, "uuid": "f1479dc0-a341-4d46-8ab4-42699e1396c8", "value": "T15CA3C71E6E219FBDF769833007B34A21A79833D637E1D685E19CD6001E6078E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302505, "uuid": "b9501870-e255-4d8e-bdcd-3b21dc8194ad", "value": "1536:F7EnxX/ZpiIvAuZrOVmBccW5iIO24eFyZNI4oSiWmAB:KnxX//iwwcWAIO2ok4zmA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745302505, "uuid": "34d2d7cc-f302-4a2a-85ff-a2c2f6ebab91", "value": 98356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302505, "uuid": "579546ab-0e6e-4b92-aa33-17c641988f42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22692e5c-1f41-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745302505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302505, "uuid": "d153293b-20d2-4e36-9f63-f03c741ad114", "comment": "Malware payload (Mirai)", "value": "29f82d0bb3f1c353303a7b4ace5684d8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302505, "uuid": "758ef529-79af-464d-9ea2-2caca04ad34b", "comment": "Malware payload (Mirai)", "value": "6ba24f1452aa47fd10f0ad2b5d45984eb83f639cce0479023818f7356dc8198d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302505, "uuid": "458a5bfd-6640-4c3a-97ab-a9f0b56eb498", "value": "T107834C22A9761E2BC5D4A8BA21F74725F2F6478A24EC861E3D710D4EBF6064032537", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302505, "uuid": "8fc626ea-874f-4c8a-b039-e0eb99fc4a8c", "value": "1536:Ggnf2Sy1qtdPhX6oLw5eBjb7tEpNk58KQ1KetDciGE7:GKv7OoJ2pNU3dE7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745302505, "uuid": "a2c07f20-464f-41f3-9c98-d591afb8f73e", "value": 81116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302505, "uuid": "a020735d-04c6-4219-a511-e6c418e6ae52", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "227e6bfd-1f41-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745302506, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302506, "uuid": "7907676c-2f02-4520-985c-7ec772daa49c", "comment": "Malware payload (Mirai)", "value": "bd91ab1892a6cedc0db76b1dedf8dbeb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302506, "uuid": "94904a87-71ce-4955-a2fa-4f9ceeaa7298", "comment": "Malware payload (Mirai)", "value": "d8807b666cb437a4603ebdc9bceb08f8b8afd27d81c5eb3739cb39eed20079b7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302506, "uuid": "37add40b-2316-420c-b66d-89a2b5c24d4f", "value": "T11BA3D706FB550FFBDCAFCD374AE9070525CC690A12A93B367574D828B64B24B0AE3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302506, "uuid": "b9177df5-44ff-4a8c-9fff-4df8000dbfed", "value": "1536:kCTVNyBDWY+q3KbvFH4v3pN7LJGlRVmxg+EgCAKZ61TcXyZ6Zn62r1g4Si5:k0VNyBjKlHmx9QAKustgK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745302506, "uuid": "49dc19ab-38f8-4db8-b81e-ef76fe4550ba", "value": 101476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302506, "uuid": "ef956f2f-31ce-43c4-abb9-6831cdf435e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22926e42-1f41-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745302506, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302506, "uuid": "72a32dbf-8dd7-4e36-91cc-1f7fd530ac94", "comment": "Malware payload (Mirai)", "value": "26ae8055c41b60dd61b023f2833fc8de", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302506, "uuid": "6d953c31-edbb-4d82-90eb-77c8eaba0333", "comment": "Malware payload (Mirai)", "value": "4379488a25e16b72e7a44aab8221340f33fbbeb1b1e4a6caed37a7573bead093", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302506, "uuid": "d40e77e9-fb18-4c74-bbea-e0d86669e500", "value": "T14F634A13B58190FCC29DC374476BB63AE93375BE1239F2AA37D8FA126D49E211E1E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302506, "uuid": "15da4f2b-f36f-4d09-85f5-b56fadcb054c", "value": "1536:GBEtqb9a7oY6uHhK0ygRZKbBqAdUF+P57atD9kuQTGJ0OGjnC:htYQsYFwERYVqAdU8PctD6TGOO+C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745302506, "uuid": "11ed4c94-9e1b-4330-8099-753ac8b0f14b", "value": 71824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302506, "uuid": "97b5e16e-d8e2-436c-b219-32d38fe7c274", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "231ce81a-1f41-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745302507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302507, "uuid": "0495a8cc-459a-4074-a288-4eeae8127337", "comment": "Malware payload (Mirai)", "value": "9c769f8a180177dc089d54f391bdf4d8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302507, "uuid": "f3695288-02a6-4dcf-9f71-0d126aef591a", "comment": "Malware payload (Mirai)", "value": "61296fdbf69648eb3fe2e813b1580bded17fdd0df3d98268186f14ef2f4ac54f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302507, "uuid": "6d479a13-9baa-4045-945e-54c0b79db215", "value": "T1D3632981F987C0F5D81B09304077F33FCB32E5298175DA6EEF6AEF26DA2754292162", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302507, "uuid": "6c7bdd5d-f48c-414b-8377-c88c5185a36f", "value": "1536:IY+2YIT1nI2TMBFP/Vwvi+9GOeLWpiXP6GvzprZ/g/sCq0s:N+2rT1I2IP/Vwvi+9GOJYXP6GLplYY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745302507, "uuid": "79b1e947-18f3-4b2b-8f56-1efe6102bf8d", "value": 66964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302507, "uuid": "f3e08b91-b8f8-4b75-b919-bcf7e5f2a126", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "234b685d-1f41-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745302507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302507, "uuid": "381dfdc8-4e4f-4a4a-8b41-06d0fa168bc6", "comment": "Malware payload (Mirai)", "value": "96f78788b94f0b898160e4c0d86c0e2d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302507, "uuid": "732dd669-44a5-449f-9800-3f376f7b8689", "comment": "Malware payload (Mirai)", "value": "a16fededf1bc934a5cf4d95c2526521647f645803e93583bf2655279d45a7a09", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302507, "uuid": "ef0a90c1-1938-49fe-95dd-51733bce3596", "value": "T1F2733B42734C0E43D0675DB02A3F2BE1D3BFA99121E4F785651EAB4692B1E361186F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302507, "uuid": "abb1cffc-9823-443f-85cf-5d23a6d997e4", "value": "1536:c06UvVt26Xh2KzVjEh283QgD47raDJ+lfaJIgoDsMDeM20GSiOd:cOMhkgU64JaJIdDm2d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745302507, "uuid": "aea6d26e-17c5-4dbf-9b57-9c3d1be14eb5", "value": 75608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302507, "uuid": "7ec3b31c-4032-47b7-a315-a2ac6f0d24aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23648582-1f41-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745302507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302507, "uuid": "c5ecf011-ee03-4551-b5c1-662c038fbee1", "comment": "Malware payload (Mirai)", "value": "20a014ff9b1c8f9c1768dbc574fc4a48", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302507, "uuid": "ec85562b-3215-40d9-a9be-996578a55abb", "comment": "Malware payload (Mirai)", "value": "67d132ab25b9fde2effe51512efd5f1b510da2ed981b9a4e7b58f956fae91aff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302507, "uuid": "3228af5f-085c-4b93-80ae-0e5d15e3797b", "value": "T132831996B8818B11C6D512BAFA1E118D3313177CE3DE73229D206F2477CB96B0E779", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302507, "uuid": "c753e3ad-d602-4ba7-a18b-9107757355f3", "value": "1536:A0nEcMURiFLmi1EvKV2YI3pkgaV7nJ8QWM0ietB3rfM7Op5OSim8:lNRSmialpkgaVUtB3rfMSpJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745302507, "uuid": "5c4d81d4-a576-4a09-9547-365c14480e21", "value": 83448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302507, "uuid": "deb4dbfb-d0f0-4667-bc43-62da83d7bb08", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2457ca59-1f41-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745302509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302509, "uuid": "7ca10c1b-0500-4e93-be09-ab560e37fd55", "comment": "Malware payload (Mirai)", "value": "658dae95eafb7ff7e92a22005734511f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302509, "uuid": "ca5c00ca-a287-4584-b33f-275927ba20fc", "comment": "Malware payload (Mirai)", "value": "7747b6ad3097a2996a099bacf3f983fb81e8e77391158e490f2d8b8db48d5607", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302509, "uuid": "f273371c-fda1-4a33-9f96-ddd14ce85de0", "value": "T142332AC1F54F80F9D94B09304063F33FCF32E5694275CAAEEF99AE36DA67541811A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302509, "uuid": "db8831ed-03e9-40b1-9e93-449f5c43fcc1", "value": "1536:UbEfIrEnIBNX7cvYb2klTXneArkWtwWw7bnPwS7FQUEh:UbEArEIBWvYb2klzeAlSWw7LPLR3E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745302509, "uuid": "6aea6a51-84d5-4fca-9231-1fae9e4b952a", "value": 50352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302509, "uuid": "b3f5ae90-0f0d-410a-9181-f93881699598", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "465877dc-1f41-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745302566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302566, "uuid": "b5202d8f-546d-444b-b78b-fe5eb667c796", "comment": "Malware payload (Mirai)", "value": "370ad1e629bcde11e9b2c50faac2bfa8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302566, "uuid": "a1196b40-08f7-4df6-a570-a3f4b975d798", "comment": "Malware payload (Mirai)", "value": "4963a025a5b946b4ffccc32729e573dfff749ea445415143e2f8da7294b0c057", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302566, "uuid": "64c0c73a-d6e0-4f86-89a3-da0915efd3c9", "value": "T1C6733B81B8815A13C6D452BBFB6F428D772613A8E3EE3207DE255F2137C781B0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302566, "uuid": "b6e3b026-97eb-4068-a940-aa7a81074c1d", "value": "1536:cMzb3cWK0UQhRn1AMpvOkqL8wuODDzDD6fpLztB7SiL:cMzo6R1tOkqYqzn6R9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745302566, "uuid": "6365f7a2-d86b-46d2-8dbf-e2e303a24cea", "value": 77628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302566, "uuid": "1db68ee1-56f8-4eaf-8e13-d5605f800db4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9325f7a7-1f51-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745309567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745309567, "uuid": "bea8f8cf-6a09-4071-b6b8-bf458a1a66ef", "comment": "Malware payload", "value": "e088e43ceef7a032326aaaab9837ffb4", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745309567, "uuid": "b72f8516-db10-4bb9-8baa-ee2a23e7c5ad", "comment": "Malware payload", "value": "97b5d6f146ad5c8c8dff8da68894d1983dcc1c956aac104857edf367862f0d6d", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745309567, "uuid": "ba7d2043-e71a-49e3-9e17-0c1a3d8cad37", "value": "T1E88533121C127F62EC65C6FF90B33EFB67F855A101B24EB6A5094A75CD37AC94F808", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745309567, "uuid": "50a4735d-d320-46e0-8966-b9519360a051", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745309567, "uuid": "74226d6d-9500-46b4-aa0d-9e152c3a21b9", "value": "49152:C8h5TNR4XI7bBg+D5Lv12VL60urh5dLt8wQDWw9jv:Rh5TNaIpVD1d2VLgfAw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745309567, "uuid": "8c0e14d2-fbd7-485e-afcc-a7421528a9b2", "value": 1872384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745309567, "uuid": "886f7972-5b35-4680-94ca-c404c9a1c68f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24982e8b-1f52-11f0-82df-82aee05be84a", "comment": "Malware payload (PureLogStealer)", "timestamp": 1745309811, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745309811, "uuid": "765ab798-accd-43c8-b792-4dbe72e4331e", "comment": "Malware payload (PureLogStealer)", "value": "ea33f2031a6eb18a11821706ba0fb689", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745309811, "uuid": "10872a79-415d-4dbc-acc7-10031b4db937", "comment": "Malware payload (PureLogStealer)", "value": "6f513c0a7a2753dbf041b92b7a2c11462ff83a90a6f0337d9514ec49567e1e17", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#81499D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745309811, "uuid": "5923ea47-6098-427c-9f65-64497f542f76", "value": "T1F9B44C1BB706CFD0C2886B36D6CF800013B4D5817797DA4E398A27D659833BBDD896", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745309811, "uuid": "b2c19300-171c-41ab-9230-2c2473475b5a", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745309811, "uuid": "22d500ad-26eb-40a1-9b44-42dbe1de7ca5", "value": "12288:FBm91nxupzz0dGjsQJtX7xxJk4mpdNZ5p9lwaMx:rSlE9sQL73J+D59w3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745309811, "uuid": "3a5f3510-1416-43a5-b2fb-d8bb6e4fb2df", "value": 521728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745309811, "uuid": "fe4123ba-68da-4cef-91e7-7241643f1aee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a559350-1f52-11f0-82df-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1745310008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310008, "uuid": "f0fffbb9-d510-4321-ae1e-c446521d28f5", "comment": "Malware payload (ConnectWise)", "value": "0d7ee8a0ec982f9643c9fb27cd64aa24", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310008, "uuid": "a4171dbe-cb7e-47fc-a376-e8bb61758b36", "comment": "Malware payload (ConnectWise)", "value": "31ed77fab72d2a50b818b0b17f30aed1d8bc7d50ea50a26155fe696645561227", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310008, "uuid": "0a081b25-bec2-4fd6-92c1-3385465ffd6c", "value": "T14B836B13B5D18475E9B20D3118B1D9B4993F7E120E648EAB2398427E0F351D1AE3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310008, "uuid": "21e6d46f-27f2-409c-b0da-145b7f3dc1b4", "value": "7631a79a9071099fa4803e1c4c5df207", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310008, "uuid": "3b370842-de38-40bf-87cc-34417897f607", "value": "1536:+azWlKzJVcNp++yQNS6xNNCT2l8NE8llbpTaCJRpsWr6cdaQTJSvYYS7Q8x2b:yFNpo6rIKlUE8fbkqRfbaQlaYYS2b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745310008, "uuid": "089781a2-7812-4a81-aef8-34ee11a40cc8", "value": 86304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310008, "uuid": "df0a0742-ea74-4606-924a-15789a49de7b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afccc63f-1f52-11f0-82df-82aee05be84a", "comment": "Malware payload (DarkVisionRAT)", "timestamp": 1745310044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310044, "uuid": "ef1deb11-d74c-4ef8-9521-da198f2fb0e8", "comment": "Malware payload (DarkVisionRAT)", "value": "f572caf16a4d053615a5f2709af7bf44", "object_relation": "md5", "Tag": [ { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310044, "uuid": "7384364c-1df9-44fd-9a50-12f309f8bcdd", "comment": "Malware payload (DarkVisionRAT)", "value": "f8c42fa48a806e9387138ef72dbe5d7ee0df3bf5b5b624f366ad9bf6c1432d3f", "object_relation": "sha256", "Tag": [ { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310044, "uuid": "ae223f90-70e3-4490-8786-b86bc2c8498b", "value": "T1B19533CDE2D18FB6C43641F891E319B8F6C6FA405E2909859EFC11A59CC78DA8936C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310044, "uuid": "75403b90-682b-495c-8b08-f29dad37da00", "value": "74224dd151827e33f203b04f96765c8e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310044, "uuid": "d7466f77-453c-4da0-be62-20c1150a37f8", "value": "49152:V8PH5sHfTUtZLm4uTFsGXcfGPTD/+TpDPKYqUEjD:UH59juTFvs+TDGTZPqUE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745310044, "uuid": "dea76d4d-f689-4dc7-8f82-911828110b3b", "value": 1924096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310044, "uuid": "d859190d-f340-4d1c-b495-57961068034d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcc88d2d-1f52-11f0-82df-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1745310120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310120, "uuid": "63f3487d-85fb-40df-9248-42d9933a8759", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "aee5b852d8f4f632f3d8a27b3f8ee18a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310120, "uuid": "65357b92-f57a-4164-a5e3-228e01284430", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "ba04a8a6d7d97475d8a2a691b17fa039276945c743a02f4e1f07af08e9eecede", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310120, "uuid": "c13faae0-b3b6-4af0-991a-e0db52c90485", "value": "T131A53342025FE279CC861AFE8B1FFE7C7350FA5580861C61DF5EA234F9269BD6902D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310120, "uuid": "ac0138ce-ce0b-4116-8cce-7aa95c295a0c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310120, "uuid": "95b390f6-cbe1-4aed-a657-e9c8bb73085a", "value": "49152:vMYI9awZNxL2XlX7nq4+6/RHEUawvil45PYp2MJj:v5J793k6vilowp5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745310120, "uuid": "4e9d8a3a-4e11-41a5-bf1a-b533bf5c1f7d", "value": 2157568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310120, "uuid": "2f73bd7c-04b5-4538-a683-646bb920b116", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea524c61-1f52-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745310142, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310142, "uuid": "66139560-3d01-49ab-a4cc-b2ca814f46a3", "comment": "Malware payload (CredentialFlusher)", "value": "56ecda4dcf788adb1ee90c930b99eae0", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310142, "uuid": "761402e9-91e0-4a86-8520-523a731c423f", "comment": "Malware payload (CredentialFlusher)", "value": "b081c1ea03f8d9d9d4fd9941501a20b0a706660f1e1dd7bed4a57b9e483963ce", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310142, "uuid": "e27bfebc-899f-47d8-be3b-fbab47c1ae71", "value": "T1C4259E027391D062FF9B92334F5AF6115BBC69260123E61F13A81D7ABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310142, "uuid": "390c43f5-48c4-4e06-8e3e-777e5c1b1cd7", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310142, "uuid": "e00a4ea5-6501-4b81-87b2-79ffec0280b8", "value": "24576:uqDEvCTbMWu7rQYlBQcBiT6rprG8aVsP:uTvC/MTQYxsWR7aVs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745310142, "uuid": "d658bae6-f95d-4d29-891f-c4f9fabe63fc", "value": 971776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310142, "uuid": "59643a89-9737-40bc-854c-0cd8a4e3055e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "399c2131-1f53-11f0-82df-82aee05be84a", "comment": "Malware payload (Ransomware.LockBit)", "timestamp": 1745310275, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310275, "uuid": "673d7281-2869-418f-9a08-2691b3367275", "comment": "Malware payload (Ransomware.LockBit)", "value": "7a84f2668e2be8670c8f9bc4cbe053bb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "lockbit", "colour": "#c3baff", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310275, "uuid": "f3b6dddd-a650-41a3-9504-71493f02f3bd", "comment": "Malware payload (Ransomware.LockBit)", "value": "9a007e70a934bc617f93d4c2ea08f2b7c6238562529bc90d89c990bd7d2983c4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "lockbit", "colour": "#c3baff", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310275, "uuid": "8dd0ace4-9ea6-4d91-bdf4-9edc7f9ca949", "value": "T18025CF35159182E6F29150B26A49B390B073F973863D5FFF80F0E3291947ED41B6E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310275, "uuid": "c8bf7a02-7d02-4bc6-9da7-b4cfe34ed36a", "value": "130d5621ef2323889c6e1ed2746329fe", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310275, "uuid": "f617b718-969a-4bf4-9e02-d3e2c6e4562e", "value": "24576:iVoX38bcWaK10TflaolhlxhX6F/FhlxhX6F/k:iKXMoWV1qao/B6ZB62", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745310275, "uuid": "10fed0e7-4a91-42b0-998f-f91b5c493009", "value": 1019904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310275, "uuid": "2bd663a1-d65a-4a7c-89e0-d4def04579d6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60ba36a9-fb5a-11ef-aa53-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745313149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745313149, "uuid": "166eee42-d06e-451a-837e-26a138234b3f", "comment": "Malware payload (Mirai)", "value": "5dc8f73dd9ba2cdd3f284c2a9d76bb0f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745313149, "uuid": "4d3daa41-04f1-40b6-b6dc-cd54380c58d8", "comment": "Malware payload (Mirai)", "value": "cbc0a3f10117b1ce2394feec34e60f8ddfdc4e2ebbfc2ede0497c7223449c8ea", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745313149, "uuid": "d4949f0c-bfba-4944-b655-65f8645a5354", "value": "T16023179AF8028D7DF94BE77E54164A09B93163C152D31B2B13A7FEA3BC331591D12E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745313149, "uuid": "09f45eec-6675-487f-9219-85247684a36e", "value": "768:6CfLqeA9RdxD8Zg2pX0ItPwSxuOVTxPcMYtXfsq8DvgGE:FfLqZD8ZDtPwSgO/PcMeXfv8DtE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745313149, "uuid": "5ea7c977-0ad1-4c10-b740-5ec8cac641ba", "value": 46684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745313149, "uuid": "74be5043-e7cd-47ff-9f13-d7ec8305620a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8257cbac-1f5a-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745313404, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745313404, "uuid": "c618aaec-9ecc-4ce6-b10e-054ff150fa70", "comment": "Malware payload", "value": "32eb9de1a6214d0c95e6a0478a100d7f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745313404, "uuid": "3268e7a3-b520-4380-94c8-7828574c7d1a", "comment": "Malware payload", "value": "171d759446b10b6b21546d192ccd876fac4d71795d1229d099866a90179d07e5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745313404, "uuid": "5e19308c-33bc-4233-b7b8-5372ada0ede6", "value": "T13524BD0B24ECEA0FF93FA63581B5F755B1521559D1E312EAAA5FBD1E3137006233B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745313404, "uuid": "95b6ffab-604a-4578-bc0a-92fbe4a5c884", "value": "6144:0lro7GRMWNzi+25sLWGNLEw/vEAOTdjVas7wLXTz0x:crPaJZ5sLWG93/vEAkVyXza", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745313404, "uuid": "4f0ab702-2338-41f3-be93-757dd8519c47", "value": 223308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745313404, "uuid": "d7935d77-aedb-44bf-b5df-a2044c4bc285", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27f3c627-1f5b-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745313682, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745313682, "uuid": "5163d69e-688d-4753-97b8-1baa6c7db952", "comment": "Malware payload", "value": "51eeaf5f33cbeeae06ba2dfe9ed24129", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745313682, "uuid": "71142803-56b0-4b3d-9c5d-1b0ffff80ec7", "comment": "Malware payload", "value": "874693244d075f882ec804f969438c1eb86dcc13ee057c2efd01799c80496480", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745313682, "uuid": "fdb2d03d-13da-4d32-98d0-e50a540b1594", "value": "T19024E05A823D0BEB937E4255132E07CE032A2FF199CBECC975C6E35B1A362126BD51", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745313682, "uuid": "3777e9b4-de8f-4108-a348-32dff10bb902", "value": "3072:xrjBEvto9fny6nnkSy5E55zoBHUzq0KjV2nBv1bRI9VjVv0wXHcprSXoLzXa7fnD:0vtoknkeBHUnbGTj58pr/a/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745313682, "uuid": "200de600-25b2-4738-82eb-be6e31691cb4", "value": 213589, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745313682, "uuid": "5ab1d983-2822-43f9-a9f0-98ec05a3539e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b57818c3-1f5b-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745313919, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745313919, "uuid": "bc8d10da-b92f-4aca-9cbf-3352183472f9", "comment": "Malware payload", "value": "c71f3fe95fb097ce754adca67b3a0539", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745313919, "uuid": "1dc93178-646b-471a-bd8e-8db2cd4d5a53", "comment": "Malware payload", "value": "ec0c0d0ef32136cd226ff3bf6898a4c7ba6923b4fe7aac09965e8818117a95e4", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745313919, "uuid": "0d89b165-26e8-4585-8912-6879e0df1a48", "value": "T11995336FDC13AA5FD43A44301CB2E05CB6791B1BA52A3142D3918A53C4F7F96BABC7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745313919, "uuid": "5a88079c-5753-4da2-8b15-65b6375e4208", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745313919, "uuid": "ffaaabac-5c12-43d5-87fc-27466f73af76", "value": "49152:udR5EbPg9/UMnfjFCAb6myQsGoEoVd3f66tz9K:KR4g5U8fjFT6RQxaVd3Tc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745313919, "uuid": "2d4652cc-b214-4210-be07-e7651636226b", "value": 1915392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745313919, "uuid": "caa729f4-615c-4c21-8413-341f6a62d77e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc97f688-1f5b-11f0-82df-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1745313985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745313985, "uuid": "51d7310f-6b7e-4880-a5eb-068bfe38431c", "comment": "Malware payload (Healer)", "value": "eac3661ae05c05bb49dfc20a46a47879", "object_relation": "md5", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745313985, "uuid": "3335befa-d819-48b2-baaf-bed9ef6488c5", "comment": "Malware payload (Healer)", "value": "a1d83bea9a8136c324c232bbc97ce04616ac97ba6cdaaeb1d45e28f278921cf3", "object_relation": "sha256", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745313985, "uuid": "dbfb87e3-b5ec-4d12-b651-a139ec8a54f1", "value": "T1C2853303AD24D23ACA0C97BAD9B3BECC47B80118BAD84B5A151B143F5F59746B22FC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745313985, "uuid": "6ef6e9d9-19af-4add-885e-f66edaee502c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745313985, "uuid": "247981ce-1c05-4710-93d4-f92e0ce3c903", "value": "49152:g+4RBZJPWpSmXDxm9yX9Vhau9FAvWUAzsj3:SrG5DTXVAvWUAzg3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745313985, "uuid": "5283f1e0-70e5-4fdb-8b2a-6c04300a0ca9", "value": 1747456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745313985, "uuid": "4c196165-ab27-4674-9707-6a42a14deecd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4df2f624-1f5c-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745314175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314175, "uuid": "a7014aa7-5554-4839-a920-1e42ef660fbc", "comment": "Malware payload (Mirai)", "value": "cfd458b8ed75ce975efb099d3b7bf3eb", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314175, "uuid": "92ea50d4-f8c7-46e0-b578-32fae3e7648d", "comment": "Malware payload (Mirai)", "value": "62a2737adce9064bfd13382f034ed12e382add839c2f4eb6f8d9f9b6ba9fb93d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745314175, "uuid": "3552dfde-f9fa-494d-a689-31b98276eca9", "value": "T18DB38488FE58936DC7E2B6FEEB5C02CD363A0798B3F679264E32065533C972465360", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745314175, "uuid": "9e8b0bad-a47c-4c82-b4f8-a27022497f88", "value": "1536:jMglrDiCtjM0/gXipjWuXqfZbJCFYAhXIrhZvNGT7O8SZgD/7FkR4PrhUVxZ:/DipiVcTrhpia808DFkR4PrCVxZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745314175, "uuid": "f08b62e1-4b7c-4cc1-85c5-3151c4c1cfe0", "value": 112468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745314175, "uuid": "52888795-7075-45af-9e8c-5ca5d802c9cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07ea9ee6-1f5d-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745314487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314487, "uuid": "56a08f21-7172-4a27-8c08-c259cb025c6d", "comment": "Malware payload", "value": "c93c4a38449ae85af6276811ae05c01b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314487, "uuid": "47c7e83a-5d5d-451d-986d-d399e4daebf9", "comment": "Malware payload", "value": "9570c152e955cf6eaf6121c3417ef9c14cdfeeab944c241cbd10e971056afec0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745314487, "uuid": "8b1a5945-f0cd-4ede-b8ca-214d4be51c4d", "value": "T14424DFFBC32DE3530196D9705AE1F4D25ECFB9253E2232EC3BAA891D08356E5DB188", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745314487, "uuid": "02375a60-be99-48ae-9764-2dce0e94ed4e", "value": "6144:00cJx68u8d7WsUKXgFZZAdP9rBsck3NLD9dFkZts74I/Ut:yJx68u8d7WsUV3AVFBu39Doy4l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745314487, "uuid": "1acdc135-f372-4e86-8778-01c95b062e05", "value": 213587, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745314487, "uuid": "5eaa1c6a-aabe-4d7f-bcdd-542f40f7daec", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11985fac-1f5d-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745314503, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314503, "uuid": "e895fd2c-e71f-4405-b679-922e5f2cae5a", "comment": "Malware payload", "value": "681ce28fcdebc5d5a284b6d1a539bcf0", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314503, "uuid": "556d765a-37e0-43cc-bf78-48b60e6fbba4", "comment": "Malware payload", "value": "079e94ee569d75efe86916ae57b60e0b5d116fbc090cd83cb91d737f72b65212", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745314503, "uuid": "c459ed4e-67c4-49c6-ba21-4f487222b441", "value": "T137F3EFAAAB715EB7EC0DCE37009D4505519C925A92DE2F6FF2B4C518E38B90F49D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745314503, "uuid": "22f9be8d-a18b-4bda-9bfe-c019f8a58150", "value": "1536:QMYoCnL6amHZa8028nZT/RMElALR7iX6IIQsFr+3MPc3hYTbx/T6mi:QMZI3Ebxb6B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745314503, "uuid": "0521b164-1c5d-4d50-8665-2fe1913a4b25", "value": 162240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745314503, "uuid": "d67d7a05-4301-4808-b707-3329416c30cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54745fd2-1f5d-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745314615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314615, "uuid": "0d5a4ac7-7c2a-4219-adaa-95be0f3830bd", "comment": "Malware payload (CredentialFlusher)", "value": "484e07eaed8229d7ce58ff597f8ac8db", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314615, "uuid": "bf4da0be-1dfc-42d7-ab8d-9e5a55c1a37b", "comment": "Malware payload (CredentialFlusher)", "value": "70111932ea441f249c3b99a8e0ddf4235b8aea24bc6093389bbb3b4df159a6e9", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745314615, "uuid": "6afd82d9-76d9-40c8-a718-4d8167033184", "value": "T15FA53363A5DC8036E8B85B301CBB43E3133CB9A22E3C429F918559FD4CB16B2A5757", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745314615, "uuid": "d2d94c93-56dd-4a3b-a95b-2902b3f85a3a", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745314615, "uuid": "b376ffbb-697f-44a5-9fdc-c8e6baa98240", "value": "49152:1cIWqrA2dkWExQvnquCohYiLFrJbrTsroXMw:bRpdRLp3YiLFFbrT4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745314615, "uuid": "8ed65caf-f637-4ebe-86e3-91aebe2b00b2", "value": 2222592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745314615, "uuid": "4073238c-3e14-4e4a-890d-d9e6ea23f2c0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6160aab-1f5d-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745314779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314779, "uuid": "7571d3bb-6d7e-4ed8-8814-91e5ff684d85", "comment": "Malware payload (Mirai)", "value": "67aa1da6536fa3b1b482867c4ac8a42c", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314779, "uuid": "6db16e5f-6b6d-4cf1-85f6-2fc050c96ade", "comment": "Malware payload (Mirai)", "value": "b883ff973734840eaf6de8a43f72d7066e8fdba91cf9aaf0b08bd0bbc8bf4841", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745314779, "uuid": "61ef4ca9-6389-4a84-bae4-f928b1d10d76", "value": "T1ECC3B748FA55A32DC7E1B6FEEF1812CE33370B98B3EA39228E31065537C9B2565354", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745314779, "uuid": "4649c28a-9b07-4d85-88c7-a196c3e43125", "value": "1536:Zhn2pY2pGbqpcWVsFZcfPR/ITmeHfZe27uSwf3mYenj3v9YKDC07AJQeMhiYUet6:OtpGbqpcWVsFYEHfmQv99pUetg59Vxn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745314779, "uuid": "57a5a313-e505-484a-ba6b-20a2f41799ae", "value": 118340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745314779, "uuid": "cb53b550-43f9-4bcf-a381-69fa6b6526ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85ba1037-1f5e-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745315127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745315127, "uuid": "0aeae3cc-9775-48e3-9e4e-84c8dfb440d1", "comment": "Malware payload", "value": "08dfeb9456bd86cff83f913375d76f10", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745315127, "uuid": "76c6e191-708d-4407-a1e0-827850408487", "comment": "Malware payload", "value": "6e60648bf04d1abf4299bef4acf6b0d7035ed5cfc324c0cb1e4d89a6a347d6fa", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745315127, "uuid": "ddca6adf-8bdd-4e55-b014-92ecd9ccffa4", "value": "T19034E0C0062DC5569AC60E3083D764F7E576BBBDC22C9B98212FF788C34D4A1D291E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745315127, "uuid": "2b47aa78-b057-4c68-8d52-d5df40390527", "value": "3072:3Yz0ANaf4A6UoAoO/m8MqTnSNh72VLSDXKGieNCZRzKut9R+tRvlx2sD8:gJNKoAhrm72VsKGi+Wz/9kpf8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745315127, "uuid": "36f8ba9a-ae83-437b-9216-3648cade83e7", "value": 247896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745315127, "uuid": "06f1c85a-8dc1-4668-9097-1a6ef5e66664", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3805378-1f5f-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745315607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745315607, "uuid": "98bfad26-6ec7-47c9-9b44-ed39e9a8fe71", "comment": "Malware payload", "value": "f0b7d9eaed1c6a944b696f5bab3ad12d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745315607, "uuid": "20ba5e08-1887-4b08-ad3a-2156f196fe8a", "comment": "Malware payload", "value": "7e742726e06754902279427d55d50d9bd852eca1ba527dabe82156e9c78e2595", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745315607, "uuid": "4d42a8f8-f135-4b65-a984-99096f780b6b", "value": "T136F3DE3D6E21BB7EE6A882314BFA6FB4D35611D332D1D680E17DC6185EB524C0C8EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745315607, "uuid": "f5a18be0-d446-4621-8495-339e06c0e9e2", "value": "1536:lvHlXx3eZTtKXIf0PGzcqGL8DmUqzJ+jA5oALTzGXo5WGEKhCXRcMaqvomyKEqeZ:lgkPNl5oALTzOoGAobNpHBJ/9SVZcxU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745315607, "uuid": "68a9edc7-2ea7-47b1-a731-67ce091748bd", "value": 162416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745315607, "uuid": "de6b9aa1-150b-4450-9bf7-7e79da5be3ef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e698866c-1f62-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745317008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745317008, "uuid": "882f9bd6-98a1-4b49-8ad1-6e8e29c48696", "comment": "Malware payload", "value": "41e439144f9d4ae5cf88d1974c3070cb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745317008, "uuid": "44e34ad7-8d44-467b-97b6-ef7a2e31f43e", "comment": "Malware payload", "value": "3ac900852e9fc81abdca4c10c7f4cc847af64e284a27d50d163fce5fa088c56c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745317008, "uuid": "9ffb454b-51f7-4056-b509-a5342d24377b", "value": "T16734F05B167F22ABD79FA507089C212208B5D3C2C756F42EED532B17B3BFB6A15480", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745317008, "uuid": "a2bde93c-0cd5-455d-92dc-8954e08c373e", "value": "6144:O+yZ0vIUgkLA4+WG2DWzeo/3VhbtQLmF5gBLxSwSkef9:O10zgkLDi2OvPt8EgRE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745317008, "uuid": "3023b625-5044-4a49-9a35-b844368fba55", "value": 247882, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745317008, "uuid": "a4d3a6ab-2f05-4284-a40e-f4077e04686f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ab290e5-1f66-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745318599, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745318599, "uuid": "3147ff7b-a528-44a8-8e41-ce25fe182f01", "comment": "Malware payload", "value": "fd5a6ba230c09f8c1d7cac8a00eb1e8c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745318599, "uuid": "449e1c7c-f57b-4c27-9d71-b014f54bad33", "comment": "Malware payload", "value": "efecd40662dc64a30d21cae7b119bd732c84aeba468a4d70806995b411c22ec2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745318599, "uuid": "daedde9f-df63-468d-b987-d523e24cdf1a", "value": "T1A726337B1F683419E267807DD9AAEA317CBCB516278957031E093D4CB1686B47ECE8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745318599, "uuid": "459d4184-aba3-4d17-9de8-713f4da49a7b", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745318599, "uuid": "40929d08-e183-46b0-b87b-609dcc627526", "value": "98304:J9JXnqWNyyfZFb4pFQz63ISgcl/WeuMh8IQWBPI9ofIob4:rJaWNyyfZtsCzygmeDMh85avfIo0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745318599, "uuid": "965f40bb-4ad0-4e96-abfb-db3ed00afc8c", "value": 4627456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745318599, "uuid": "aae0e0d7-f71f-4eb5-8635-2f08e5a30470", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6c2d96a-1f68-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745319532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745319532, "uuid": "3deca6b6-7a27-4785-ab84-f872b36caf7d", "comment": "Malware payload (Mirai)", "value": "6e9404edca3fe65c2e9d17f46ae0a465", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745319532, "uuid": "18286f37-054c-4ad6-828f-1c0311cdaf21", "comment": "Malware payload (Mirai)", "value": "b2308cfd32cd60bf9412329015c975ebc9cdff4620c1e36f4dc5db1d6881b733", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745319532, "uuid": "c4591832-1885-4932-950e-ed2fb7d832e5", "value": "T12A334B05F683C5F0D8470470215BAF79AE35EA901250DE6FEBF4BA67AC71643642BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745319532, "uuid": "11972ae0-6f50-4e14-89ab-d7a3345e87fe", "value": "1536:VefnfIfPvz2F5GTyxqIUI31kOO6DA3rF:VGfMT2FoyFu4A7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745319532, "uuid": "51572255-be8b-4167-ab2d-156c198d91be", "value": 54020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745319532, "uuid": "62dd6a1d-cebe-4eb9-b96b-09828f36ab33", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f159261-1f69-11f0-82df-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1745319787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745319787, "uuid": "46b91a18-46c9-4c8a-901a-ebcfab317f9e", "comment": "Malware payload (Healer)", "value": "f4a7655098fe1ef045d2ca2f20f26de8", "object_relation": "md5", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745319787, "uuid": "fe869c47-1d47-42e6-8a2b-715cb95b3015", "comment": "Malware payload (Healer)", "value": "87feb9be3d3576a52c0c18f322b7f23d92ce01c325856778dd9fcc90c83eb807", "object_relation": "sha256", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745319787, "uuid": "0025b804-8b80-4827-9a3d-494e835c13aa", "value": "T1658533A54FF37DACCDB6B739DA6FC70946F4B4C2282A8E79471801753B14A6E0CC44", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745319787, "uuid": "d8f9c49f-904c-4f5f-ae5f-3107a8abfca9", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745319787, "uuid": "3a2002c3-8d5d-4d7a-8a0a-109e3d87af03", "value": "49152:zWQmIicAeioFX+Kfmp/AjWXcyXBBGKJs:aQQeBX+6M/NLG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745319787, "uuid": "785c1f60-4952-4417-b9ce-0d8235dc936e", "value": 1757696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745319787, "uuid": "9bece4df-dd36-4ee4-a67c-6f7378bc8dfc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "824bb71a-1f6a-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745320276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745320276, "uuid": "410f1319-6f99-48e5-9c48-a45eebf6377c", "comment": "Malware payload", "value": "ac3b539f6a3a92bb02519e5913cec863", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745320276, "uuid": "c6872683-0b29-4423-bdf0-b4dc81f466f5", "comment": "Malware payload", "value": "5f8572f519c1bed90fedcfe9f4d51c4dd449a5b0f8b9999af18b30d57ae3f7f0", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745320276, "uuid": "066da3e1-3f67-4e1f-85b8-dcdd11165245", "value": "T1BA53F97766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745320276, "uuid": "56860812-3e18-4ab5-bbc9-76c2f9743773", "value": "768:aA1fho1SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/dsaR1X1t1RB1p+dSl2sf:aA1fho1P6n2+aR1X1t1RB1p+dSg1s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745320276, "uuid": "d53b1f3b-0153-416a-ab7d-b36c11fb5025", "value": 64434, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745320276, "uuid": "ac6aaa38-580c-40b6-9f68-15ad2bf46e9f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce2c520e-1f6a-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745320403, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745320403, "uuid": "d5053136-51bc-4568-b549-3184d3386abb", "comment": "Malware payload", "value": "5bfe25381ae41db5fd36106aa17f05ba", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745320403, "uuid": "996d35ee-45de-45ad-963f-19e1cd316c03", "comment": "Malware payload", "value": "5d41b7093a7a9749cd20cf7992a3a3985d0470ef2ebca379ed830ebcbb1a584e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745320403, "uuid": "95e37fae-b7a3-4bdb-8564-f934dd9e4422", "value": "T1E595233589620504CC628BB56D2E4232EC42BBD2EC7697AC32C6C2CD5DEDAD52E774", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745320403, "uuid": "ed01e434-c720-47f0-80e6-dfc7587e2cd4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745320403, "uuid": "bb44ff95-bb5d-42ef-9fa7-4441007e78be", "value": "49152:Nsb5eF7hMym+U0ysSZ0PBnZxYPXHvpB2qMdRx+Fg/R0F3AYh:mb5KeymlxsSwnZxY5B2qMXgXG2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745320403, "uuid": "fd015d96-4438-4332-bd38-b5bb81ce266d", "value": 2039808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745320403, "uuid": "7ea96efd-dab1-48ad-9172-068b93e8974f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6742c9df-1f6b-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745320660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745320660, "uuid": "0f32e72b-b4ee-49cf-bb58-c3ffac880783", "comment": "Malware payload (CredentialFlusher)", "value": "6fa0f7e6481537508a38ed37f60bbe80", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745320660, "uuid": "7fd1dfc0-3112-4fe1-98ec-874736f86109", "comment": "Malware payload (CredentialFlusher)", "value": "39fcb4239f968dba06add4418d2edf445d5b210f60648d1079f1ffef1704ecee", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745320660, "uuid": "80f65fec-0ea6-43a6-a13d-2a4992c026a7", "value": "T155259E027391C062FFAB92334F5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745320660, "uuid": "fa099991-bd0a-4e54-bbac-200a0f414b6b", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745320660, "uuid": "b77a0f8a-d616-4844-b10b-e84ff64c1632", "value": "12288:MqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgafldUwy:MqDEvCTbMWu7rQYlBQcBiT6rprG8a9Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745320660, "uuid": "73a6bb92-f9d4-46a4-9d32-8bda0a81a8d3", "value": 973312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745320660, "uuid": "ba5b6b4e-d3e4-4afe-bebd-36f1527d80e7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60d62fa3-fb5a-11ef-aa53-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745320761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745320761, "uuid": "896d7a23-b328-4d2e-8724-855a1b6c67d0", "comment": "Malware payload (Mirai)", "value": "24022994585fa2ac7bc207eff6a29a09", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745320761, "uuid": "2639fc28-716e-4e07-861b-c0ff453d31fa", "comment": "Malware payload (Mirai)", "value": "ae40589ca011bbeeab71412a1d1ecaab9a8f5757815c11832a1cb775691d8b58", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745320761, "uuid": "fe07276f-a825-45ac-8898-683ce8dd36b6", "value": "T13E53B519BF610FB7EC6BCD3709A81B0538CC644A22A87B367934D468F64B25B59F3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745320761, "uuid": "5a1f293a-1532-43d7-940c-dd43484ccc64", "value": "768:jQ0mOKvxcYm8WFUvw5xReSjer2gGZVxyXi6AL2Bj/9w:jQ0mp5ykwxTjY2tZVxz2Be", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745320761, "uuid": "6f6f2c37-e38b-47e2-a40b-4a4900a913b3", "value": 61096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745320761, "uuid": "0fa0d0d7-52ff-4664-910b-bb3b4907a43d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b11e1c0-1f6c-11f0-82df-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1745321015, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745321015, "uuid": "3fc42018-b385-4d19-a638-be1f5ba428d4", "comment": "Malware payload (RedLineStealer)", "value": "4944dd5f3f1a7433a1a3ab07e61127f3", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745321015, "uuid": "1bd1e1e7-2243-4e60-aa8a-04026447a905", "comment": "Malware payload (RedLineStealer)", "value": "331f39fb5e2edb271d5c73cacb679c8f08a2f18ca284c664e1abbb5b8a25a307", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745321015, "uuid": "de074d5b-88c9-4edd-9e6d-7d1a4a7421e1", "value": "T10666331420C1DE23D6B3013655F9AEA32239327583A8E1DFF68E16BF9D167E2D3250", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745321015, "uuid": "b696c877-5998-4028-b619-d6e2d7217f26", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745321015, "uuid": "a822fe23-9269-4b58-be90-470711ba45e5", "value": "196608:E6i3vGflt5BGwtWWomWigNShn4rmhHROOtmrZG:ViOfl/BG4WZigNSJrHRzaZG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745321015, "uuid": "d1cd595d-7adb-4b6f-82f1-b7a71b45bc04", "value": 6617600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745321015, "uuid": "f6af05e2-08cf-463e-b437-d7444730496c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f81c0b8f-1f6c-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745321332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745321332, "uuid": "92118e61-e339-4eba-9c34-4179958bd770", "comment": "Malware payload (CredentialFlusher)", "value": "7cb81edbb48ffe0d2fdfc0ac194edee7", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745321332, "uuid": "8e8c68d3-9d47-4b13-89de-9d306db20a40", "comment": "Malware payload (CredentialFlusher)", "value": "12a3967f455aa32b90d4aafa6a53117918e77b1452aba5ac0615b27a272bb141", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745321332, "uuid": "21b1b8c2-90fd-4efd-a283-ad178705550e", "value": "T19B259E0273D1C062FF9B92334B5AF6515BBC69260123E61F13A81D7ABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745321332, "uuid": "69a69933-141d-487e-9066-cfb858ea5817", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745321332, "uuid": "9ef0daf0-4ec1-452d-8881-8777a262943d", "value": "24576:YqDEvCTbMWu7rQYlBQcBiT6rprG8avtV:YTvC/MTQYxsWR7av", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745321332, "uuid": "1373ad20-122c-477c-a031-102ad918f062", "value": 967168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745321332, "uuid": "a064f131-7de2-4f09-a2d9-f790d807cd3a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dedc2865-1f6d-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745321719, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745321719, "uuid": "e439a835-bdda-4ca6-bf2d-c9a33358f2fe", "comment": "Malware payload", "value": "3299b1e954b45b3c5188095a1a9cc809", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745321719, "uuid": "f23e1efa-2256-48fe-b4e7-15395059e4df", "comment": "Malware payload", "value": "841a9f3f141087342ff08baa99e0db04aec868dba797349cc8e0da0755ccb776", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745321719, "uuid": "061d73dc-4771-4bb1-93a0-ddf5dee52100", "value": "T1C534F1E86B34B40861DE5D834A1615461843382B25CCED8CA7A0FADFB44CBBF6C77D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745321719, "uuid": "14202c40-0626-4c59-9e1d-7df0324c3d6b", "value": "6144:3xjDjaca2sInS/y5FxcHEGc71kwMPd/BueswJkE38mZ5mtPkDU:3hjPa2LSUFxckp7OBd/BaekErstPGU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745321719, "uuid": "d4797498-e2d8-47a0-abf8-f16102be8dae", "value": 247886, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745321719, "uuid": "092f7969-5fb5-466e-ae68-d2e14777ef2d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b915660f-1f73-11f0-82df-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1745324233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745324233, "uuid": "01624c51-28c9-4a5c-af69-3829ab945d49", "comment": "Malware payload (Formbook)", "value": "99b8fa837a5076fd88e83068ef958b5f", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745324233, "uuid": "2a15dd3e-31a9-44f6-ae3a-38176f95c4e7", "comment": "Malware payload (Formbook)", "value": "647e1db51da6dd00ee04e85b99d3a30e0145436b1dc9b435a1b2e1b09a856759", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745324233, "uuid": "7aa087e8-6e0b-4245-8eed-75d7af498d24", "value": "T13745BF22A3DDC360CB669173BF6AB7056EBF3C610630B95B2F880D7DA950171162D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745324233, "uuid": "b1040a37-5dc8-4e2e-8ffa-222cb709c4d0", "value": "649f6ed9a4d576c154bbc0357156a4a4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745324233, "uuid": "4a6972dd-d6d6-4e9f-9084-922201c5bb6a", "value": "24576:bu6J33O0c+JY5UZ+XC0kGso6FaekLMogeQbzXWY:Vu0c++OCvkGs9FaeoqeBY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745324233, "uuid": "9bd2c9c3-bdca-43ba-8aa4-6372988d3a36", "value": 1189888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745324233, "uuid": "5c4febc4-7743-4043-9ed8-02114b659406", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b98d6cb3-1f74-11f0-82df-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1745324663, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745324663, "uuid": "c804cb46-420c-415b-8b10-04d0a6e64f2e", "comment": "Malware payload (AgentTesla)", "value": "c85976db41304b498373df47b6729272", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745324663, "uuid": "607334ed-68f6-4e5b-87f5-f6cc56b93688", "comment": "Malware payload (AgentTesla)", "value": "f1996ba71a747a39cf573ecef539059c498ac507d2796ef13bd7356bec776159", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745324663, "uuid": "3fa5c223-4e2b-4936-bd88-a604584feaeb", "value": "T13125AE2273DDC360CB669173BF6AB7016EBF3C614630B95B1F880D7DA960162162D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745324663, "uuid": "aa241e56-5463-4633-8dce-1955edaba41a", "value": "649f6ed9a4d576c154bbc0357156a4a4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745324663, "uuid": "c18bcfe3-3d69-4795-ad13-6032919116d9", "value": "24576:9u6J33O0c+JY5UZ+XC0kGso6Faecgksoh2rIMF1DhT1WY:Pu0c++OCvkGs9FaemsRvFfUY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745324663, "uuid": "e6c8384e-8747-469f-9941-6e7d734f2988", "value": 1056768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745324663, "uuid": "790b8261-bb6a-4eed-9146-2448261dcd51", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11709770-1f77-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745325670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745325670, "uuid": "8d561008-d283-4d56-a6a7-0f7a8fee8fc3", "comment": "Malware payload", "value": "d8293b06b9125a9305d69fc38275224b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745325670, "uuid": "8a659d28-4ffd-4b80-9789-4cb75a97c8a7", "comment": "Malware payload", "value": "bc78438c7c755ffed42ec5f86110fbac739c4fdd90215f7403a7e455d20dde4e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745325670, "uuid": "8847b271-b0ef-49c7-8725-77b1dfdb7f7b", "value": "T150A5222F85942984E17CFC7123D800979F6EDE48DB94E3A87D29C649F8872151F7C8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745325670, "uuid": "41b92faf-69e8-4a69-a9d6-e62bc1ee7459", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745325670, "uuid": "14dff252-221a-48cb-8568-10f331ae79c2", "value": "49152:nArGf0Pc4bat4igWXAqEz042OQJocSS8K:ArGgNbu4yA72pHf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745325670, "uuid": "efad36d7-bcbb-48ad-8fa4-1c30b455e168", "value": 2082816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745325670, "uuid": "3061867e-db4f-469d-afef-f50de9908e2a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e364088-1f77-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745325772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745325772, "uuid": "f06d3003-8641-496b-af6c-d8915034e046", "comment": "Malware payload", "value": "daf23c793661ade806cf95fbf32950a0", "object_relation": "md5", "Tag": [ { "name": "10pluspositivesinVT", "colour": "#8e4bd5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745325772, "uuid": "41fc3133-28d1-42a4-ab3f-9b4c0eb96831", "comment": "Malware payload", "value": "63595592895705319246bb332604584687f952f5ba1368871ddf51b411822064", "object_relation": "sha256", "Tag": [ { "name": "10pluspositivesinVT", "colour": "#8e4bd5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745325772, "uuid": "8cca5937-579c-4656-b65b-56467f792f84", "value": "T137048D2175C1C0B2D5B3023509E8AB6156BDFDB14FB216AB77DC0E9D2F744D0AA293", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745325772, "uuid": "47cfab14-a40b-4aca-a7c1-e35c104fb61c", "value": "881885df6ae2926705767bdea20f74c7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745325772, "uuid": "5d4997c9-f9b0-4a2d-90da-3dd6193bf8de", "value": "3072:hys2ghWbG9MRaI3d9Zb9lHol/+sfl+UR2VYlha+Ili:hysTh6G9MHd9B9lIhd+URsBb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745325772, "uuid": "8daa37d9-7783-4652-a9ff-28aac47c9c5e", "value": 181248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745325772, "uuid": "e58dd24c-d5bc-4ba2-8f13-29a5e385e1f2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f2deb4c-1f77-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745326197, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745326197, "uuid": "c1054a23-558f-4827-98ea-d1b46da6bab9", "comment": "Malware payload", "value": "5e19e13fce59c0c9ba7506bd38b98041", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745326197, "uuid": "19420d58-7fa0-4d7f-be09-7e26dba225b1", "comment": "Malware payload", "value": "8a27f91d47ea7007f5abf4a35310e8c741b0095ab321a56d2d7ac53986eac08d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745326197, "uuid": "eb99c903-db16-4520-bd1f-4c25851033aa", "value": "T1DC2633A18B53C928C436AC38A3E29573F65C53CEA79EDB44707B25A17402BCEE53C5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745326197, "uuid": "22ae5717-34c2-4e95-8796-2d9fbe6d24be", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745326197, "uuid": "4e84661c-8799-4a3b-b58c-42493e881a6d", "value": "98304:d404kTWtlKfIh07cnAkNTbRAYyGxikSUEY:PMcj7cnFNnR7txik", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745326197, "uuid": "f10b0ebf-5f5e-4dfc-a91d-a68e684c7266", "value": 4594688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745326197, "uuid": "98388049-bfca-4e75-a34d-e6006d8b40a5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f68da0f-7fd9-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1745326662, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745326662, "uuid": "81e73961-c77e-4dc7-b518-b3de4fefd10f", "comment": "Malware payload", "value": "b226f0b625d3d5e7a4ea8475ddab0dfc", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745326662, "uuid": "9e3dba97-e8b9-4e23-97c0-96135ea17ecd", "comment": "Malware payload", "value": "f0a712b4468a2ba0bee0511df056f66d3f51d66eb8460c733f73b19336370686", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745326662, "uuid": "abb050db-a161-4ae5-b08f-78f75925497d", "value": "773301D00762278C8265D9753CAD301E4524252F32EA2D102DABD18FF55B723ACB6EFD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745326662, "uuid": "fbedd247-2940-43ee-8058-9b257b7dfeaf", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQi:8D+CAXFYQChaAUk5ljnQi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745326662, "uuid": "a19461f6-3bb7-4f2a-a188-3db853408d69", "value": 51100, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae942658-1f7e-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745328940, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745328940, "uuid": "37a80424-a923-4e62-82a3-ad64bbbc7a9f", "comment": "Malware payload (CredentialFlusher)", "value": "dade41bfbec7f6f502be11b06e7637ec", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745328940, "uuid": "e2945602-63d6-46bd-8ceb-8d2807c53972", "comment": "Malware payload (CredentialFlusher)", "value": "f497d48aca5adbf75ef56e5049a1ae859920cae5274b5dd28fb403596bd7f077", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745328940, "uuid": "2a984a38-5975-456e-b182-f893cb626b0e", "value": "T1E9259E0273D1D062FF9B92334B5AF6115BBC69260123E62F13A81D79BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745328940, "uuid": "09f1e8b1-d53b-4854-8a09-5e1f33d3c9a8", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745328940, "uuid": "815baa41-51ea-4b7f-81e8-638602aa4b65", "value": "24576:oqDEvCTbMWu7rQYlBQcBiT6rprG8aLrAZqZJ:oTvC/MTQYxsWR7aLkZqZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745328940, "uuid": "4dbae8cf-9e17-4ae1-aabe-4c041f838dd9", "value": 970240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745328940, "uuid": "ff917068-d39a-4089-844c-06211ba4cf66", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73bf6f2d-1f7f-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1745329271, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745329271, "uuid": "031f26a4-5a41-4e04-8cdd-2bf2cebcdc31", "comment": "Malware payload (Amadey)", "value": "e1fb56861d2aab37e6d538fe925dcaee", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745329271, "uuid": "da06b484-4e75-4676-974e-54339d6d4d61", "comment": "Malware payload (Amadey)", "value": "fb96bb38dd06f573a65bf08e6695fb4547d6df6d0ef84c2c71254f5ba8e38a56", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745329271, "uuid": "e723e3e4-1f06-445a-8c79-7f3b76c399f4", "value": "T10C159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745329271, "uuid": "42a77267-3435-492b-8eb2-7907067cabca", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745329271, "uuid": "595809b2-4080-4c81-9b29-064c1ba0d197", "value": "24576:SqDEvCTbMWu7rQYlBQcBiT6rprG8aeIV:STvC/MTQYxsWR7aeI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745329271, "uuid": "feaf6550-8b0d-4ea6-843a-584aa513a90e", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745329271, "uuid": "412a78e4-5b83-4fa0-9097-ffaae8beaec5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3f63e10-1f7f-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745329486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745329486, "uuid": "f244e5e9-e34d-47c3-8e06-f58c1a9af6a6", "comment": "Malware payload", "value": "94c8b6e130c227a8ff777ff8c8e93ab4", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745329486, "uuid": "67cebeac-4e96-4c93-af10-afcbec9b95d4", "comment": "Malware payload", "value": "d1bc0dfe2fca9aaeabbaaa8b886e72dd80935fed5cb8b359a8f1ec08aa2bb866", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745329486, "uuid": "e8cf88a3-d6d6-445b-bb48-eba5cb4bd4f2", "value": "T1B19533E83C8DE169C1FCC3B19CC3707AAD245231AF69C253764AA9D1C86FB4856D78", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745329486, "uuid": "de48f5d6-d3a3-45a2-9e0a-ebb13c8b46f4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745329486, "uuid": "226f4982-eabf-44a7-a6b1-830763d5200c", "value": "49152:K4TndvjMwWq0gYq4AQBmyd63UsbGzbJJKUfNDjtFERfAE2rNKL:KqSq55CdfsqpRt8RfA5RE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745329486, "uuid": "7027762f-ba54-4178-899f-a74dceb4fc71", "value": 1884160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745329486, "uuid": "ed6a8520-a9df-4e66-94bb-393545efb306", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "122c5c9c-1f81-11f0-82df-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1745329966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745329966, "uuid": "2875328e-5940-4e1a-a2a1-c86cd3cb1a9b", "comment": "Malware payload (Healer)", "value": "8e5d3639e9453a815b8b1bed6b7fecdd", "object_relation": "md5", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745329966, "uuid": "8281c04f-c592-4d5a-bd93-3a8c53b64a70", "comment": "Malware payload (Healer)", "value": "627aa86d2a9c9f02e2a94969d9adc87325ebca240cfff8f062dc22632474d7aa", "object_relation": "sha256", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745329966, "uuid": "a43faa40-a828-4f34-8e54-91e7227efdd5", "value": "T16D8533241BC6E512C0FA4DB89A271B1071330CB9016F53A77A427BDDB7714AAA67FD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745329966, "uuid": "934ba095-1ad0-4066-895f-52ab8e337698", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745329966, "uuid": "95da12f8-28e3-4e42-9e5f-a43b6b684079", "value": "49152:gviLX+ZDcL0WFpGZY6jStOff+YC5pGfA7:tXGcLjBe7ehb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745329966, "uuid": "5073c84a-ca84-463d-ae2e-ca184bc495bf", "value": 1729536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745329966, "uuid": "4b5f462a-4851-4b7e-a46f-bc9fd00a30f4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1699c40c-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1745330747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745330747, "uuid": "5cd49e60-0fe1-47f3-bb6a-a4f9a6c73bcd", "comment": "Malware payload", "value": "21ab19d00f6577ebcb2e719b8a52344c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745330747, "uuid": "45f50ec3-72ff-4ad4-b0a4-58e13d328baa", "comment": "Malware payload", "value": "898e00110e699b1381509252bd0614c8ffe8e04c7692678bf3eeaecf131f8af0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745330747, "uuid": "3d925fea-cfd3-414f-a68a-5b3036d78868", "value": "D953020233AA29B196714AF1E7FDBB88E6493D588FF26C256C113D6CF97239D1CC4908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745330747, "uuid": "aef4c398-1df2-4046-ab88-b7a0aa048b1f", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px2:yYI0ARqw1qAEv7UIFM8oJorFquyjT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745330747, "uuid": "7c91e6d9-ce3e-4d8d-ab50-a3660f93b679", "value": 65160, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "717dfc24-1f83-11f0-82df-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1745330985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745330985, "uuid": "93c25350-d083-439e-af75-aea05a2b9838", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "3c1ea9a8bec163413e708b347f682fd8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745330985, "uuid": "04bd9b42-4667-43e4-9c7a-4387ec51553e", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "6aa188ddcef9b0c8d841b26e519038eb924ac9d96cf24798d953aa16521ecc3c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745330985, "uuid": "9b480a3c-29fa-494a-9ea4-dd3b5d74ea8c", "value": "T172A533DACBDF25AAC8AF647950C342347EF6F2316DCCE29D1E875239CC4763506482", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745330985, "uuid": "34549aa7-e7f7-450a-b222-11d5b6d97089", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745330985, "uuid": "1712c293-912e-431f-8240-b47abfc9c06a", "value": "49152:PCEDWuuSabN37eIiKJGob9CC/yTdBbPzXzRtFl:SuI97eIiKJGkCLpBDhl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745330985, "uuid": "5f637bd4-3c0f-4f1e-960b-46f92e767113", "value": 2129920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745330985, "uuid": "9fb28621-6413-4ab4-b6b8-146727c25d19", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd0819c6-1f84-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745331648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745331648, "uuid": "0d66603a-2c13-465d-9633-d16686a7efde", "comment": "Malware payload", "value": "04ee05904e24e851585d99b62984e0b3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745331648, "uuid": "41ccd246-ad70-4037-81fc-089f7c557b9d", "comment": "Malware payload", "value": "981107968b3f9f9894988465c8816fbb429c3b04a2e4eed68157337f36367d3f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745331648, "uuid": "bbafa5e3-8ac1-4e8d-9040-57a15575eec7", "value": "T1A02633A08E73423CFADD9D78CCD447AAF3B4044890C3B7F175592226ACD7178E6B46", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745331648, "uuid": "300a7513-092e-462d-8c22-395f123eaf33", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745331648, "uuid": "9a119394-bb44-4287-b902-3a162a94fa53", "value": "98304:iI8CgjcOHVNIvKNg9NEXy4wvHJnZxyE3iBTb:iBPoEXylpnG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745331648, "uuid": "b8e1d330-8e4e-417b-b9be-721470210b78", "value": 4632064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745331648, "uuid": "b43e6f65-d335-4915-8dd2-6ce3570b942c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d0dfcb0-9966-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1745333105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333105, "uuid": "2ed654ef-6fc1-4723-859a-3ed090c84d35", "comment": "Malware payload", "value": "af4d21f7d77e8a1bc4f82a834309ad0a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "PSLoramyra", "colour": "#4a4aa5", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "skynetx-com-br", "colour": "#98daf4", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333105, "uuid": "e17dd0b3-b5d9-4adc-9494-4572ac6a91f1", "comment": "Malware payload", "value": "149698fea0657620e3972ab9fa450a868727c6da1199e3706c4f1c98dfdd9ffc", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "PSLoramyra", "colour": "#4a4aa5", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "skynetx-com-br", "colour": "#98daf4", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333105, "uuid": "cdd9fbe5-0186-4e29-9001-7d3c48593793", "value": "TNULL", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333105, "uuid": "9ffe1865-ab47-4822-91d3-878a6588706c", "value": "12:qrMpN10Ndipd6VW6JGZc0vV8UvVh9cvVd4TMykpooV:qCCipAg6n0vaUv1UnqyH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745333105, "uuid": "2db30688-5e2e-42a6-9bda-1c49871de1f8", "value": 544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333105, "uuid": "971f2795-9445-4549-b44f-a84e93e80bc5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "617478b7-1f88-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745333105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333105, "uuid": "ffcb166d-24b2-425e-adc0-ccc128cf863c", "comment": "Malware payload", "value": "cb0ed9871a605edf358fc245154d9054", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333105, "uuid": "ac974405-8318-4b7c-abdd-d7ec446cb824", "comment": "Malware payload", "value": "cc5da69b0aa10411964db6fdc7d51b24c448ade6ecc73867e46421a423e76ae1", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333105, "uuid": "69e19d65-7aa1-4af6-8133-3c875fae2318", "value": "T15A71718BBAC432801B5BEFEB735369C9FA5ECC1734884947E00679C03C01626E1E7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333105, "uuid": "96bd0c10-167d-4cf8-a98e-eb6770acbfdd", "value": "96:w78VZtAPhMxY0oL/VnITkcRegJ1NwTcWxRZ4aNyDW9fa28+sjCQTx:m2tAPhH77VnITPRTJHwTcWxRZ4syDWbI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745333105, "uuid": "5fff3410-dc3c-451c-8952-012cd274b06d", "value": 3757, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333105, "uuid": "ca6a55d0-6e5a-4b9f-a614-dd6782f9fd03", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63be58bc-1f88-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745333109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333109, "uuid": "fa80a630-a9ef-4f63-b6b6-12b8f459df1a", "comment": "Malware payload", "value": "1d39c8e4f1fd50ca94cc09ad89b3ea37", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333109, "uuid": "99263b69-778c-4cce-b9e6-254461a7f7fc", "comment": "Malware payload", "value": "cd4de44c9a65c0b467709e2dbad254e04bc49992d3e7985d8d7aafe90367a471", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333109, "uuid": "61195512-a23a-4255-a802-83b7d1a9cd51", "value": "T1A9D43BEC31ADB6265EE342F5106F1507B2782823580C8860F121EDBD37B999951BBF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333109, "uuid": "9bca6b3d-b519-4688-9184-ecad9a02dd55", "value": "6144:T69o4f0ENXYooTwiZ+N30pzozzGql4erLnQEsDFx6FuPucNp1m8LcgigN2kI/:mZfxNXf930pzoZlzo7IFuJN+9j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745333109, "uuid": "6052bbb3-0865-4c02-81ad-79a26928ad22", "value": 612501, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333109, "uuid": "11c46d7a-ac79-4429-867c-e6f2c50dffd0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6438a191-1f88-11f0-82df-82aee05be84a", "comment": "Malware payload (PureCrypter)", "timestamp": 1745333110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333110, "uuid": "303926c4-8f4e-4930-95b7-1c075321b7a0", "comment": "Malware payload (PureCrypter)", "value": "72d6c8da86bd30175f56b1199ff87af4", "object_relation": "md5", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333110, "uuid": "eaba79e2-7ebf-4171-8d31-4686b7701751", "comment": "Malware payload (PureCrypter)", "value": "374c270caa42b3ba1a0b31c33a47fe590c38ef8997845d48ae3fb8a575f7d608", "object_relation": "sha256", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333110, "uuid": "8f3abad7-d35e-4bcc-a124-74bdb9b832b6", "value": "T1DAB5BE15E3E811B8D87BD674CA559333E7B078560730E58F0699D6452FB3AA2AB3F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333110, "uuid": "f28bea3e-dd62-4856-9e6c-6c0556247428", "value": "de74e43788a8a76ae683dbf7add004fb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333110, "uuid": "c8aa57ad-f0f5-428d-9acb-700c24501873", "value": "24576:2m65Bu5AmdT2E6by/Rhensmbj1U2ThxnsqbHf1H2mQ+w5XOQXYAE2VyDpFOgPTc9:R65BG3T2E+wRhMNVQleTzHB1skQ1hNs4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745333110, "uuid": "cd2b2f92-71d4-4157-8e44-30b6dfbe01df", "value": 2279976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333110, "uuid": "5f01c97d-7cd0-42de-80aa-19fcfd6bf15f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64468a52-1f88-11f0-82df-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1745333110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333110, "uuid": "1ce95213-8d24-4b25-97dc-05a2de70f6ec", "comment": "Malware payload (NetSupport)", "value": "483b94629ada24174c5b1ad8538f21e2", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333110, "uuid": "fc4bcd59-7a11-4f35-a3c3-21068e1938ff", "comment": "Malware payload (NetSupport)", "value": "d49f1ffa74ae44c897c6e75aed6d2008d57e1403f07e213e9490895370c3c182", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333110, "uuid": "4d905f48-4bca-4af8-b052-f46b0fdefa13", "value": "T1FCC53379B525C823FB61FB290D013EC89176BB62DE49D7B08C01F0606B4D8E98B9ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333110, "uuid": "3619a4d7-912c-4290-9d73-65268204e0af", "value": "49152:o03aCGl9HopSLEfcFtYqCNRiUoyW9h9+L1EUo9i6yK5+pIupX:opC29Hooc0KqCN0UPLOfv4pfpX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745333110, "uuid": "65095dd2-fa9d-40f6-8492-9c3689151a8a", "value": 2513508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333110, "uuid": "8b21faa9-b7f0-474b-9b25-65cdd6996a4d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69c78973-1f88-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745333119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333119, "uuid": "6445fe23-3871-4499-8a7b-b46326a8cc5e", "comment": "Malware payload", "value": "72acc275e2659c2afa995fa855f03cab", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333119, "uuid": "c01c84b2-b701-4b89-996c-7688874893ac", "comment": "Malware payload", "value": "30810c2fa79e24d7835cb4faac6470885530491cbb2410e938e5a073b3c9baef", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333119, "uuid": "71aa9772-96e2-4df6-9381-2e54f3b922f5", "value": "T1AE66220493978BF1DEE706F48806266439792F338D148EDEE4B4B9F96EB1A523035F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333119, "uuid": "ea1dac88-8721-41b0-bc50-a45316755cac", "value": "087853508c88e6dfc47a24f9097729c1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333119, "uuid": "f21e999d-596a-4c2c-bcc4-c3955a46064b", "value": "98304:olF38+8erUn2lgCIb6RE13Xmqs0a371DVU4TqvVcDJZiri4EgKKeMtY89bT+VR:olRqeuCIOE2kas4TqveDJGrC893+VR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745333119, "uuid": "099eba16-f30a-4710-b614-3fbd49c6008a", "value": 6958592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333119, "uuid": "7dd6573f-c5fe-4b63-9ca9-087ddd72850c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "901624be-1f88-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745333184, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333184, "uuid": "d90ffeb9-730b-47ba-87e4-e6052fd14ee5", "comment": "Malware payload", "value": "eacc15042117afc454faa8be0406f50d", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333184, "uuid": "27a50f32-f246-4874-a854-dc16d68894b9", "comment": "Malware payload", "value": "bc4a10f60153bc45debee468fe486ebda9d79f59926355f9accf5c8b41ff8048", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333184, "uuid": "412da229-5c85-40e2-ab3b-2c11ddbe9200", "value": "T14F8523771D06486AE0DD0BBA68467EF7BCA7D7B111170EFC8250F5C062B2E62639B1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333184, "uuid": "8d956add-18b1-4017-a1e8-e6a5e64089ce", "value": "2a0371a13a19795fe9490e06d5c1a88e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333184, "uuid": "27756b2a-5578-4a12-8811-12b0eb883a93", "value": "49152:YfnJ0fk6c6W0ftJxuAVhtBDWqM+r7POp:YfnykzRkRu0jgqMJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745333184, "uuid": "39b5cda6-40b2-43c6-ba29-226fec732120", "value": 1803264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333184, "uuid": "8fa69dc3-ca71-43c2-a87b-f0e14f2deec0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cceaf6f1-1f88-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745333286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333286, "uuid": "d9e69373-4cea-46d9-9fd7-dff6c9bd608d", "comment": "Malware payload", "value": "6177a07184f48964a941cad123f6f5af", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333286, "uuid": "1def29ec-ab45-4a7a-8390-fd17c9d4d578", "comment": "Malware payload", "value": "09cd2f4a5f0c3f888e174a4038f7e34be11e68f0ebbeb3706fdb821efe4e5d32", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333286, "uuid": "f41438e6-1ab3-4237-bbb4-9c3e49bfae88", "value": "T14634F1F4117C48206C4A6E8179124EAFBB1B2B071E823372C66E9CD59D61B79ECCDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333286, "uuid": "67b9b960-ab08-4424-b249-905d981df6a3", "value": "6144:q5DRD676uoaXPOKd1XLiRyOKVZSyQMFMfKm27Zcyw4QTeW:q5D96GuoaXL0CVFFeO9chheW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745333286, "uuid": "ace6c676-5072-4b7c-ac77-0eaa2f5aaa0f", "value": 247896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333286, "uuid": "281ec914-7b31-4a86-9049-ea279b494128", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f092dae0-1f88-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745333346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333346, "uuid": "035c9f8f-44bd-4318-9552-5a7b2db6cc02", "comment": "Malware payload (CredentialFlusher)", "value": "5d5bbc722a697ef9482cea3282c183ca", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333346, "uuid": "a60e37e1-4120-4c48-9a49-4fa3cd029435", "comment": "Malware payload (CredentialFlusher)", "value": "b614dd61e3f3ad6f0008d47b85e1f62f1653b1d084fa112da1825942f2ef3fef", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333346, "uuid": "ab124e00-4c52-4207-8a68-5d7e059d5fad", "value": "T17125AE0273D1C062FF9B92334B5AF6515BBC69260123E62F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333346, "uuid": "f850fcd7-1666-4eea-88f8-c01abe909d5a", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333346, "uuid": "ec396c07-dda1-4f3e-a4c6-4d610f8aac42", "value": "24576:FqDEvCTbMWu7rQYlBQcBiT6rprG8allUog93:FTvC/MTQYxsWR7almoS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745333346, "uuid": "849c22f2-5cad-45d1-8eeb-e476be5bd7b1", "value": 968704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333346, "uuid": "4f0de694-9663-4741-a36c-b582eb2ecf01", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "851d4c05-1f87-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1745333490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333490, "uuid": "eefa9be6-a8bd-4e0f-b2d5-31b279886b64", "comment": "Malware payload (Amadey)", "value": "63143fea1b26e0d4e856243651309721", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333490, "uuid": "163f9e2a-e70e-4eb3-a80e-7e87aa42952a", "comment": "Malware payload (Amadey)", "value": "2940fb0b74b0036e0ec640565b1dcd5b05d8a6b965007832231cb24d2752d335", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333490, "uuid": "ff36fa7b-064d-4428-a556-94b044645e6c", "value": "T112A52307E6F88122F4A153B02AF706C70E3BBF51563D439A174BAD5D1C690929B70B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333490, "uuid": "60e85b8a-d149-45cf-ba28-eae911abc4b8", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333490, "uuid": "a4305f4e-0354-48f5-baa7-4c484873bcc3", "value": "49152:ElIWqayx2BGbVrgBjAwct+474RtWO9jYt2wrNpi9rg8IN:LoK28bdgBItl4jWqjYMwrajIN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745333490, "uuid": "2a5513c1-ef71-4a30-a2ee-eac0233e7ed1", "value": 2144768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333490, "uuid": "41c82708-2a3e-45fe-bd5b-97da12a2d414", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33c04588-1f8a-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745333888, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333888, "uuid": "50256184-279d-4b67-b1b4-be297cc48bdd", "comment": "Malware payload", "value": "fa9fde7ca0a4619c04e7c6c9f023d7c6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333888, "uuid": "fa879e09-3f27-42d3-9e45-a4d502f9594d", "comment": "Malware payload", "value": "1f7b09d118535346eb0e336c875269259e1bcd37bcf7e8bac6bbc155ed6a9d43", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333888, "uuid": "de49e8b6-139a-4793-82ab-797d22a05ca8", "value": "T139A512CB3C3F53A0C68B3CF941ADA6DA97A946B5046F94471EA14031ED279FB3AB41", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333888, "uuid": "dcdb9fc5-fa01-4a63-98ea-50f6bdaf1f12", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333888, "uuid": "e2e4f48a-7141-4c21-b0f1-86ba8bda2f3f", "value": "49152:GiTsUu3XR/oBUcHmQ3wMNfjYEn6p0ogr41pgMH+c0N:Gify/oahMNfUW6mogr4jgw+X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745333888, "uuid": "cb2ccab2-98b3-44bd-824a-52f79bb95ee9", "value": 2139648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333888, "uuid": "4a4624a3-6acc-4fc3-b175-0d60fd2368a7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b657bd7a-ecea-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "53b68e36-fdde-42b0-9456-4fd3f92b3493", "comment": "Malware payload (Mirai)", "value": "7321bcec20755a3d137173d8dd4a11f1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "68de26da-40d1-4efa-8156-2ce020196440", "comment": "Malware payload (Mirai)", "value": "67d226666a93862203e77c45137fd83c0e5e1119af158b013117495b63e03454", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "7d67ef90-3e52-4298-8d93-84b2ae99b440", "value": "T115835A857D818622C9E0327BFA1F52CD336557E8E2EB72178D221F6177CA92B0D7B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "567d3b94-5962-47e1-be37-b63ce3eb8ffe", "value": "1536:UM1yJXMYXoRAWoJ5ygJAI57utMtcXKEC5n2oeNPLXAoPCGvQkZKl:UOy0RAsSWXI2bPrAo1ZZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334729, "uuid": "7059e034-a289-4636-bf5b-5f35d6beb805", "value": 87836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "06090877-e876-4621-a744-bd2ac35c0aa2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82216789-ecf6-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "de20d0f2-55e4-49c5-8a71-0ec9b2477a59", "comment": "Malware payload (Mirai)", "value": "487dd999e01599f9a14d9083b2983ef8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "7c518205-133e-4b77-a067-cab4ea35193b", "comment": "Malware payload (Mirai)", "value": "a44606471a871a2b398aaa0503f50cf102adb5d2a01c79f94a9f2bfe17ed259f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "b49265db-0037-4f94-9691-e343270fd62a", "value": "T143534AC5B90B81F1D4274A7441ABF6BFCF30E57A5030894EEF98EE39DE7798526042", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "4ec8739f-273f-4910-b7a1-730b419119ef", "value": "768:Jj3UlOHQ23LTshXAgXggko0K9gnzP998QAehBcnRjlzC02LDfCsGB92XE1inmtCr:l1HQ2bAhQIglDp99VkkoP2XEkm3sU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334729, "uuid": "238824ef-5d23-4f9a-89ff-a18f1b91c46b", "value": 66212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "4435d4ed-cd77-469e-b6a0-f5dd367d5624", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "295aa716-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "4492b385-0c33-4a44-bf6f-f6afeb196344", "comment": "Malware payload (Mirai)", "value": "30c1a7b8de0102daff01c2a26dcbf905", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "630fc6c3-3e51-409e-91f5-ff00fbd6463f", "comment": "Malware payload (Mirai)", "value": "c1c5e12b22e4178d076fb3706c901ee4d4b7f1557c051b7d13c404d301765217", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "38435ffb-6650-4835-bb32-bac9d0815a31", "value": "T1AAA34A95F60F94F4E82340B0425BF2BFCB71A6354061C949DFD4EF28EA3B6D5A6083", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "a656cf5b-8223-48a0-9f13-715d51a0c6bb", "value": "1536:/rv5+moJBofPg4M63hk+S/tRnNvXNGFqZgT0izhu/+hYcbjs:zMViMahkzF9wsgTFz/bjs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334729, "uuid": "0234f025-a9a2-4fc5-84ca-3a3e76188b13", "value": 104116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "9dfc3d97-f8d0-4faf-b813-71af4206af57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c487d48-ecf0-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "e2993112-276f-4c8b-b61f-de3bccd85fcc", "comment": "Malware payload (Mirai)", "value": "2492f925eb781e96262acd2f20198d95", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "17860ec9-e930-41aa-82d5-37aebc37d6d8", "comment": "Malware payload (Mirai)", "value": "77b63db3ecf5222275cc98a68606b7d5313528e695b193257a601b7d30d837ba", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "0343a399-ff20-4440-8041-ecc439d969cf", "value": "T190836C45DC374B10E1E607F06FA98B03AAD03B6A26D76B44C74CB638F61D4E4A1C1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "f3c038c4-8c80-4019-870b-b67ce0ac5ac7", "value": "1536:29Rf+Jzl9/Jm1bcYVxNiNtf234CYzhxYt5gQbLHM5caZV+P5Gacut+MF8:29RixAAY0N523NY9w+7GhGstf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334729, "uuid": "ea7aa7fe-0b8b-4d1c-8bfa-054cf7e022bc", "value": 82812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "8a290a5f-6d93-4968-ab3e-5604c9e495d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41a4b5c0-ed02-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "553d7413-2e13-4757-a43a-6435c776a568", "comment": "Malware payload (Mirai)", "value": "41ed814b686f25a3d8bc1820762d5515", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "f9307ade-754b-4f16-89ba-093cfd03b8d0", "comment": "Malware payload (Mirai)", "value": "a1a6926b93bf296992cb31de76246f26d75870245f095e6289b83d5d60c4ef48", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "400b7bff-8b24-4bb4-bfac-4f014e70b4a2", "value": "T1BC835A857D818622C9D1327BFA1E528C332567E8E2EB72178D221F6577CAC2F0D7B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "64449bf5-3820-4621-95c9-d3b7cd12fc1d", "value": "1536:JRhEFmO8NyFj/j1YkNfE1yWekQHZfK42vHXyrPj+d1EkZK:JRaFmXMFjb1YdLKfyHWL+3dZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334729, "uuid": "fe5a4d9e-fd5b-4c87-a49b-591434746ed7", "value": 87980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "0d71d8b1-f355-4c98-995c-6ec5888eac1c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "296de328-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "89dfad1c-529c-473a-8f9d-eb5b1286f915", "comment": "Malware payload (Mirai)", "value": "721c73254e7fe10c4728658f2c546047", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "50ac3f3f-2bcf-4839-a286-1db5d5d36353", "comment": "Malware payload (Mirai)", "value": "c76d487bbf7cb1a6743d397381529f945b229c7df6b2ec27111d095a448f5402", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "00f6d273-8e7a-441a-be18-0ca8da2536fb", "value": "T1C3B33946FD819B22C8D42279FA2D118E33231778D3DF72129E245F2577CA96B0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "46669709-38bb-4894-98b1-e10b5c790d0c", "value": "1536:FhnlDdpPW95Q083ftbUWuumzDQFBaLScb3F7aCfino+brMtiRq3TJB:BvPJ0833uumkOLSwfIq3TJB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334729, "uuid": "cc047eba-8936-4dec-8420-1f53f38e3195", "value": 108756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "16d96549-733b-45d8-a810-bb21603658a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2970f609-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "89b7f2f7-bf48-4f6c-a9cc-29e7a695642e", "comment": "Malware payload (Mirai)", "value": "7054fb839379afe38df6f60dabcd56fd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "1e98707b-bb9d-445f-ac18-c52eb3c1aa85", "comment": "Malware payload (Mirai)", "value": "329b5885b7e275adac37eb18a80ecdb3caf7be655086997faa2dfbc167d32b2f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "fdfce483-4eb7-4580-8f3f-a57af44ac6e7", "value": "T12FB32885BD51DA22C9E4377ABA2E51CC332207B8D3DB3112DD265F6477CAC2B0E7A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "80569598-bdf4-4a2a-92cc-4b56fba432f2", "value": "1536:OhRfVzFAlL9KmLHcR/reN6IDP12SOwzo92swrYofee7Ben/j72dNb+0kA+p:OhR9ZABtDwjeFDPoorRfI7QN1+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334729, "uuid": "6518e010-f25b-4345-a153-0063c144e4bf", "value": 108444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "d6694607-0196-4f14-86cf-b9ac9dd03e60", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2972c756-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "e1e0e2d1-a318-4728-b54d-6dab8875edfe", "comment": "Malware payload (Mirai)", "value": "f63a28a46c62c6804e72ebe9e980d813", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "d60e91d6-6832-420f-b39e-65ebe20ba99a", "comment": "Malware payload (Mirai)", "value": "aaa59a329b7d9ace426ce5afbfeb6b15f5a8010865de4bad68e3ec03aa1f5a59", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "7dd02bcb-78dd-4c3a-8194-9375ba432546", "value": "T1EEA37E0AA6180A43D1FB6E702E3F17E893ADD5D020F4A94D254EBB4783B1FB511C6E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "88487271-ae06-4474-a153-bc2305733a1d", "value": "3072:CknYc0SBll6n8Uu/Pj09olh9XAj50SAqG:CvbwlldXXj0otAV0SA1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334729, "uuid": "01d84b00-e0d0-4eca-bfba-9b143ac75af2", "value": 104788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "cab88262-bc10-49ce-8100-80d63971b8c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ffceff0-ece9-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "cd2cfb22-a06a-414a-90a1-c0086be24dac", "comment": "Malware payload (Mirai)", "value": "9c08cf774c8899873bad9c397e06ca00", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "b800ec0f-1781-498a-b6a7-7cd3c5c5e8df", "comment": "Malware payload (Mirai)", "value": "ac2d50248dc2a39a5c1ffaceaa71fc3914526beb7ff7c8e334855258b4fab2bd", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "6e47350c-4075-4848-9c06-c53ce91ed6ab", "value": "T1D0836C21AA7A1E27C0C0B57A21F7436AF2F1574918A8CA1F7D610E9EFF6556032137", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "5bf577c8-7800-433f-822f-36a8d5c3e502", "value": "1536:HcV6YhQAeimKo693TvmqlMfEQtccFAEW2ttgDAL:H2SAeQo69DL5Wa24DAL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334729, "uuid": "956f5d12-72a5-478b-aaae-57a8d3d40658", "value": 84236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334729, "uuid": "b28b3934-ff95-4c88-84f4-e414f7e30b2a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d041df4f-ece5-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "e2c0f54d-ed13-4668-9763-913a0fcf5055", "comment": "Malware payload (Mirai)", "value": "0c09d2f51a060fa5c5dba2d7d4b045d0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "87e985a0-e8b4-499c-a196-25569e85f2a8", "comment": "Malware payload (Mirai)", "value": "2f8911081fac2c795de75fe06ddbb0fffe8c008b4988ce54dab458271380ed33", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "a201c805-50cb-4bc8-af53-234615d8864f", "value": "T1B7A36C80BA145C31E05C2C3663BBD34A3B571AE65993F101D844E7CFBB8B6C06EA45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "507b30f7-af8b-4f35-aa45-7c49d77d69b6", "value": "1536:QDSb5nXyh6LdYrVVeHj1ikCF+YMaUhqTql1kMuud4X6C/LUuxKmfy5U4mGP+y2PJ:QGb5XyQYTez5selm8de9Ce4BPEhZ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334730, "uuid": "9a06b20b-d52b-4b1d-ac0a-2e144b984d48", "value": 97784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "3353a18d-bcfa-4ff1-8f8a-6f49029f35cf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2979a26a-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "07f273c5-0972-4b05-bf81-c9a923e37d45", "comment": "Malware payload (Mirai)", "value": "bcec33465ca01255232ab7acd537402f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "93c76291-9f85-456a-8cec-e01a257e42ff", "comment": "Malware payload (Mirai)", "value": "baec6b1394100795d6c67f6813c16023222a532dd7f94816a5c39d5a6f3b13e0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "937e3407-fe94-4c2b-89dc-aac9e2356008", "value": "T137B35C36A9762E17C0D0B17A22F74377F2F117491468CA1EBDA10E8EAF2566032477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "9e469db3-407c-46e3-924b-7adc3f63c832", "value": "1536:QsrvucGdqJZCsu+yP42hPQWhYR740Afw6J4vWQc8A3Aa0B64A6GWrt+pEXa:/OsuZTWWO20Af7EKHi6eHrEEK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334730, "uuid": "4a0e7420-5e2c-4460-8312-f20ca8220974", "value": 116992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "8578dee6-5eac-4c53-b9c0-897b91153b4d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29811deb-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745334730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "082e2f7a-f3f4-4f1b-b767-a9ece53b639e", "comment": "Malware payload (Gafgyt)", "value": "ad4802636715f3015cd83e94f5356189", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "10dab32f-49dd-4ba5-abc0-17ff06748717", "comment": "Malware payload (Gafgyt)", "value": "b71d233c1ccc47ea7d2b3300680e113278a7dc23345a2c40f7ab31e95a1f835f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "c8842465-371c-4f2e-8253-b5c36ed4939b", "value": "T1F6A3CF72A9A95EE1C10547F8F0B1AE395703F615CA072FB636CEC7696087E88F5493", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "ebe7acd8-335f-4d47-b670-4dd6174c1e40", "value": "1536:fv39bDmG69N8YqOpeYn32LprX/j1r37vPBGKBn3HDRZWztGoSJXHyzCN:H93h69LqOsYGLhXprDIE3Dw4oSNyz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334730, "uuid": "f39b44f4-0498-4608-8c22-ce5662b6c36e", "value": 104296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "acdbe5ec-2f4f-4c27-b101-75a599bfa5a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c40b470-ecf2-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "d59afbe9-de66-447d-aaf3-98a2cafd049c", "comment": "Malware payload (Mirai)", "value": "34102fc22f30394e70d30fca53ced335", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "f0f37120-2929-46f2-94a9-00438325b941", "comment": "Malware payload (Mirai)", "value": "dab7fc4d48eb479c2c58e1fbd10dcec31b8ace12091be9b81eac08dc085e12fe", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "bd1f884f-9344-4be8-9bdf-9c69f6eba689", "value": "T19EC3AF87F74B5890C82102F11BC75BED2FA332115E5F84F66C1DA63B5A7A4CF4A0A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "3730dd7c-85be-4483-9edd-a2495cd568ed", "value": "1536:34BiRGZmwmFLMtYf4k7bHrDl+N7RsWi7AkKdU+KFut4bNNgI/LW:KKGZ/aLKY9rDl+tufcksKFut4bNNgIq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334730, "uuid": "15fe7ac0-3112-4c4a-91d3-4b919945cfdb", "value": 124100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "36229ea1-a816-41d0-8bbb-182a5c86ed14", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2984d020-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "a1ea18d6-2ecf-4e4f-94fd-9ec9191353cd", "comment": "Malware payload (Mirai)", "value": "41216506403188a528cc33caf765846f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "0175bf74-f8a6-4407-9d04-70592daf46c8", "comment": "Malware payload (Mirai)", "value": "a49f50fdba0de9c330d0980f6cce815c1525d0800adeab6c3d82a7954923ef02", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "551171d0-587a-4e05-a361-9e6c6be8be83", "value": "T175D30705BFA50FF7E86BCD3745AD2B06258D491A22AA7B36BD74D81CF54B20B09D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "291b1bdb-1dda-42c4-b78b-ff6b4f1714ee", "value": "1536:6H5Dn+Q9HPGTkTUUZR2gkbVfap0ZsRcLJrWyNA+SCepezJRBa2o6o9XJXOg652ax:MJHi8AgAfahRcdypCNz546QS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334730, "uuid": "f8e1cfd7-37d7-4035-9b2b-2bb576f4571d", "value": 138832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "7807dcc0-7686-4a5b-ac8d-b6e1a236ddf0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1231233e-ed01-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "e2f57057-fb77-4553-8c7f-830000d64629", "comment": "Malware payload (Mirai)", "value": "54cb3dc5db1ac51a3e512d48d0936c07", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "2f7ea878-5638-4055-b545-a9376f94141b", "comment": "Malware payload (Mirai)", "value": "388c12a30dcf683884280955a90a7732849a4fc28b1b1fb051d53d530edcbdf9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "8e413dc6-bd38-43d7-9984-4be872a08805", "value": "T138934C46BD818B21D5D0267AFE1E028D332B57E8E3DF72228D141B2577CB92B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "e6855357-a579-4fd9-a6e5-b5ddedea1bf6", "value": "1536:5xnfgsjO7LC2Scu3slaiUSwYju9DQ5PtvUPTB/ZVneSQ/AEFxbbMdisRniVVEkZK:QsOfCgu8SSVksTqTB/vBQoRniVVdZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334730, "uuid": "752e5c38-89db-4da3-9eba-0340ced838a8", "value": 96632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "47deb77f-596d-484d-b28a-18732e194779", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29883042-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "dafe7e99-431a-4f08-a805-705fef2e3715", "comment": "Malware payload (Mirai)", "value": "95ae8b9d1bd83286efb2d6aaa67ba4f9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "1eb7a97a-63c4-42c2-bb9c-1c5d63639bac", "comment": "Malware payload (Mirai)", "value": "200e571bc0a6d2562563022dfcc60ac5ac8c2e40eb73a053be8555349a674a69", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "06ae179d-9d55-4396-a84e-25c575ecfaf9", "value": "T1BBC34A4AFD819B21D8D422B9FA2E118933130B7CD3EB71128D255F2577CAA5B0F7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "ade476c2-a10f-4f0b-a92e-1ba98b6c189a", "value": "1536:j9ngEQ/k66dqoHQuQ/j/ee4sr/RjC+0iLIwn+0GO78sP2SEf6Wpu9lDai2oMZT:R4kqoHE/eFM89i9l78sP2SEf6nyoMx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334730, "uuid": "da58b111-187e-4aa4-9e99-7150d6d835a4", "value": 118792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "ad2e0176-7ce7-4dc9-a647-fec7c48abea4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "299466ae-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "9c2f0287-d5f8-4c8e-abe2-61398ce9db18", "comment": "Malware payload (Mirai)", "value": "9aff45bce598a65ad3f904f1bda32707", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "a70560de-e117-4ad5-a352-196c2ae65a2b", "comment": "Malware payload (Mirai)", "value": "35c14500814ac5bc2c71312bb1323f3be34afa878c7f06cefb0bf26f983564db", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "1ccfb451-4774-4f05-aac3-a37c3113bb1d", "value": "T16DB32985BD91DA63C9E4337ABA2D51CC372217B8D3DB3112CD265F2477CAC2B0A7A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "869e0a01-3302-4eaf-8624-f05ff432a47d", "value": "1536:bhRsCQBUKeh8arh2ykpj1R0M4yjkSJPYln1WblqDE86Ca+oGFGf:bhRjQBUF3q3OsYl1mnCG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334730, "uuid": "40f68775-0548-47c8-8850-0da8b698355b", "value": 108396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "4b691429-4acc-438d-b9d3-6cf1ab5dece5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "299791af-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745334730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "b599a434-b441-4c5a-bbeb-35fe63ede0e4", "comment": "Malware payload", "value": "e0b56eeacc8021480b6c108f2399c454", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "e8c81404-1ded-411b-b52c-c9d1414a22d2", "comment": "Malware payload", "value": "9805b83b8ba70f7c27b3de59aac8252af3811d697c77827e2860ce60798a79c6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "2d82229b-637e-4246-ae71-f2521f1f802d", "value": "T148D3E60E6E118F6DF3A8C6354BB78B71935827C722E2C685D67CE5101F6428E245FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "2160fb32-6233-403f-b68d-2735cfa32b37", "value": "3072:OTmmxZv379FwIvrxKtsCeR2DTdnz4ms82VP:S//BFwIvrxb2DOc0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334730, "uuid": "9d9976cf-a499-493a-ab69-318cd0a46406", "value": 134736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "f289287d-c952-4b28-b250-aaabb071b2b8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "299fcd89-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745334730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "372d2ef0-f160-4903-a975-07b1aba4e0b1", "comment": "Malware payload", "value": "80ea0276fa5b8917bcf61362435d5800", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "f6f07b73-686a-4578-8f7d-ee5de0660ae2", "comment": "Malware payload", "value": "0aca38ca3bffe4b3f56b6c7176db9e87c2dc4cee803b1a3bfbb46e9479c0968f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "8cde4565-0dd9-4fc2-90fc-562c67200989", "value": "T129D35B92BB47CCBEF95987B85AA20E7463D425D725B5C5D3C23FBE094E242C04D1AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "2dc7fd00-980d-4c84-989a-a29665331143", "value": "1536:UH9Ip6Xo6CJCfp4U0u48s8TJGHQdCGoTfRq8h0DyZhgo8rhVW0q3jB/GSLHED/Mu:j6CJCZVJ9UAV6EEwEToN4+npg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334730, "uuid": "8ce448dd-d971-41b2-ab71-052f24375b63", "value": 132720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "1004c7f1-1d8e-49c7-a279-d11e89346285", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29a0a7e0-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745334730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "74c1fff1-30a6-456d-864d-0b39c0221d1d", "comment": "Malware payload", "value": "f60b533092214e481b195744664c1f73", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "e2f75e7a-613d-457f-9f88-df35fc622c83", "comment": "Malware payload", "value": "b84a45cdc10d1a21916b410cb5c5a3f2d77cf99da52608d5b7a2373ebb678da0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "2a2b4f72-bc19-4863-a823-53762937a10b", "value": "T1C3B36C45DC3B4B21D1EA07F09FA98B0395E03B6B25D7AB04D648B634F60E4F462C57", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "ae8997f7-13e3-4f1d-95da-aea4ddb268f0", "value": "3072:U5d5JKsVU6xXy1HjENuncHqvH4cqbUuj+te:Uo6xXiVHKUujX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334730, "uuid": "3f0a26a4-20ee-4c73-98f6-d3a619559a3e", "value": 116600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "f0560328-7257-4193-9aa4-36a38d7e486b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2407770f-ece8-11ef-b199-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745334730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "04367f7b-e0af-4f0b-9bf1-837319deb14c", "comment": "Malware payload (Gafgyt)", "value": "a0bde997d90acf2dba1631325ab3a04e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "c0b49144-2415-4725-8f8c-be48ddb92bd2", "comment": "Malware payload (Gafgyt)", "value": "7c2198f1d618c12cd7c30328f2c0821d1b0c948adba0b437c529a8272c8d612c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "2abf5d8d-cfa3-4975-bfe7-eddbf1c4859d", "value": "T11324B6C79952C566E6C7C933AD3D378C3E18C3ABC7C97342E510AB1B2795C3B16A96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "4e5e7960-92a7-412c-93f6-cd8d18e60f77", "value": "3072:Pkw9O5j2QFWyJxdN1G0CI2GySO8EZbad8K8HUoMEVAZx:F+WIrCIbLO8EZbI8HUoMEVAZx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334730, "uuid": "72a876eb-30ed-49bc-ac58-835168bc4fd4", "value": 209900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "45343714-8f60-4a13-beea-b3141b33b2e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf6a2b84-ecee-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "9d17662c-e6a8-407e-ae3c-42953a111abe", "comment": "Malware payload (Mirai)", "value": "f042e1ee916f151908cad501a32883bd", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "9996fcb3-7e2d-4a1d-92ed-cf66e3ce9417", "comment": "Malware payload (Mirai)", "value": "d822048a8eb925046edc4e5e72c41d82c56093dd87bb22f49685326d85986769", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "6ec41f81-73bd-49b5-b2ae-0c095f0b3f00", "value": "T162B34A46BD819B21D4D536BAFE5F028D331B5BE8E3EA71129D100B2567CAD2B0F776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "9197a0a3-ebf6-4c76-8ad3-7f96c0ac2bf4", "value": "3072:jkNplkS1Ol6zd7lB9o/8rUgBTlbP6rZCy/Z:+lkS7aSBTlbPoZXZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334730, "uuid": "775d7228-d4b9-4e79-8e31-78ce8a26537c", "value": 111964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "ed5db866-4fdf-4f3c-ba6c-7d725eb2a488", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29b8bb78-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745334730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "6c1bb4f3-5270-4ce6-86b8-3ec7b8004804", "comment": "Malware payload", "value": "02c935faa918a746b4537ecf9513e1e6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "c9aaf617-5aab-465d-8022-3b2ea54d136b", "comment": "Malware payload", "value": "1118fdb5e6e3d1c617842c61b5fa21b73a1a5320462270fde70b6fffac598ff4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "ad73f165-32d2-4d90-94d8-7fd4adc51f22", "value": "T18DF34B87FD0A0E89F06ECEF0866D83D73E5016DB97B2DD32D59C59D87B1B2680E868", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "f5033aef-e7ae-43e2-b5b2-832520c7dba0", "value": "3072:WHfblXak3FCso8VA2ujeYqfipN1T+XydYD7PGUhqv:WHzlhiqOim1ePGUhq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334730, "uuid": "40ff9cba-3689-45c8-af15-9e507d8e4c67", "value": 168692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "884ed40d-f795-4f85-a26e-52fda53a3785", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0cbabba9-efe9-11ef-b8ac-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "bd0541e0-b401-48a0-8494-9c974dd31407", "comment": "Malware payload (Mirai)", "value": "14224151bc0539bfeaf724349be0860b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "c2740bf6-f8cb-4d63-b557-c7b548c0a524", "comment": "Malware payload (Mirai)", "value": "ae3d740fc5a9fac12d1ef7c9204a0e25574d095a803baa988e093b8f577fb3bc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "bdf80372-1f5b-4b8f-b786-260d3634e935", "value": "T1813419C7A901C609D5C7D876BD3E36883F17C76BC3C57302D690AB1727A693B09BA6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "9f26fe70-c546-485c-9ae1-087bbb771c33", "value": "3072:ZpIsdBOFU/qKQtNZVoZMCExlOodZPrl5CaYQZPad8bv:vBOtN+EvtdZPrnCGZPl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334730, "uuid": "16d326de-752d-48da-8b01-b8378e678f78", "value": 230816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "2ecda9ba-09b5-4fa9-9713-5f91dc986ddc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29c54045-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745334730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "4dfaaae5-5c09-4ba9-b9bc-13315a782447", "comment": "Malware payload", "value": "6dddc0ff9d533a66f842a4448afe6217", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "d86817ce-a83a-424d-a745-31d67e52134c", "comment": "Malware payload", "value": "115f01a1bef2044e475b1f440d33bd1c276232d8040c16e8448c8d3e1a824948", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "75621b2a-f9f9-440f-b5a7-f89fcc38f252", "value": "T1CFA35BC0B74CAC31C15C2D3773BFC79A37670AE499D2E120D441EA8EB74B6986D245", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "e6abbb13-130c-460a-8da8-473f9039058b", "value": "1536:bAteuHhQ8NX2bRYVOeeRYL8O81ks+kcY4chI4COQt17K5WPgFbHkKCYBFwdiEZrB:bUB1X2bRiOeh1mJhsJ2WPSEjiUreo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334730, "uuid": "a74945f8-cb8b-4fd7-b1f3-492976792c6d", "value": 105424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "1ba05b57-d365-4c21-bdff-36c2328637c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29cae6ba-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745334730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "a3b49e11-29bb-4e27-a202-bc527765dc00", "comment": "Malware payload", "value": "22116cb46dc1cde929367bda3079f3c5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "69b257e0-6e39-4012-b077-3a9215f4ba8c", "comment": "Malware payload", "value": "d8eed7b0619dc669c127a87d2624c69541a07860effb86b0713f987dbabbf5ae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "54ee279a-ef01-44dd-9850-1b72a4ec5b7a", "value": "T108E3CF93F74B5050C82606F147C71BFD2EA322419E6BD4E32C1EB63B2A764CF59157", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "eff5a774-aca5-439b-97b8-7b46c78a2625", "value": "3072:NJLczKrjpM710xiX8Q5TS3ZO8vdJgSqB:N6Uj8GxiDS0+fq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334730, "uuid": "82fa21cd-ab7e-4f85-b3e2-540657c111af", "value": 149700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "10060b18-4378-46e6-ae1f-89abc0f274d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7624d3a-ecfb-11ef-b199-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745334730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "f616c5f5-55ba-496e-b8d5-dbcf645f8c49", "comment": "Malware payload (Gafgyt)", "value": "f1aca270b9f08c6f2658e9e4ce9ecf40", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "4c2f4e05-5233-4ba2-8656-eefae902f2a3", "comment": "Malware payload (Gafgyt)", "value": "14f18f18dcf6196d11f6d2be53bf18291d8c60ab174f58068444766dbac34d75", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "58d39805-2aa9-4b39-9bc8-d13fd0372284", "value": "T13D24E6C3F619D562C248DC326B3ABB443F16856BDDC2E301E000E68F779B66B29B85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "0a8c887d-4ec2-4385-a72b-d64592395682", "value": "3072:pNcCCZF7E+vojwq8I2C3ur8PQxZvad8pn4:j+7EYoQI2drVxZvg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334730, "uuid": "8941f5ef-7483-4a48-bff0-5088c1caf7ca", "value": 222276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "93945fd7-33b8-431d-9d94-63c828167eb8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17ef35eb-ece9-11ef-b199-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "daf089bd-9189-4581-842c-470fe2eac36e", "comment": "Malware payload (Mirai)", "value": "7857c0f728fa3a1db2d6fcd9783d2e39", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "c9aa9dba-2dd5-46f7-b332-d34bd125dd58", "comment": "Malware payload (Mirai)", "value": "34bf22669c899430ece4cf3272594d75c29d8bdb1ebb26b2bf0f997f9980fdbf", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "d6a7c7ef-bb93-4468-b503-99810ef163e5", "value": "T12224D6C3A95AC512C6C7E933FD3D36992F20D36BC3C5730AE5109B9B2B5683B15A97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "2e7a2e3a-7e47-40e1-92a1-1acc71b8b1df", "value": "3072:XFoyNwtJ/bIRJa8wb1iHqIrpi/NOThZbad8e:+Q+sRJzRqIVUOThZb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334730, "uuid": "19146281-a1ba-4f4a-927b-bf43afbc65d6", "value": 209852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "b86fd3f0-f8da-4fc4-874c-5ee504721df4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "faabeae3-ece7-11ef-b199-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745334730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "eaa18e43-7d45-4a0d-9d70-3e328243f959", "comment": "Malware payload (Gafgyt)", "value": "de5916ee947c5fba69e4655e866e65b6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "018ade1b-260f-44e8-9234-3a3734ee371e", "comment": "Malware payload (Gafgyt)", "value": "55173c8faa1f6bc92874c55fd280be21f7e581c1076ac50f238ff1c97b9f3a9f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "8c819dd4-dc91-4bde-b278-f6d69387ae0b", "value": "T148243BD7A912DA05D9C7D936AD3D3AAC3F11C36BC3C5F301F520AB1B639683B09A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "d174103e-4af8-40e5-b583-17d6e77a0a48", "value": "3072:NyUAxZYvv0pIEmf/4ldmDCzLXnDV9BZPad8:XiYVfIzTnDlZP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334730, "uuid": "dfc9663a-5c97-4e3c-8806-1bbc123ed90a", "value": 218404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334730, "uuid": "1fe0e9c3-083d-4047-99bc-ba90cc0122ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4acd3760-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745334785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334785, "uuid": "d36e8ce5-f74b-4480-9411-a417eef57abc", "comment": "Malware payload", "value": "12516aefb4de89efdf688cec644177b9", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334785, "uuid": "237a8281-e62e-4b0f-a194-b25e0de4af42", "comment": "Malware payload", "value": "0ab4ffcd0eaa3dce52af15dbf4248692dd709d8bfe97d29f03fb7a69dedbbe58", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334785, "uuid": "0f9733ec-7a07-4e59-b5ed-8fcf971f9f3a", "value": "T1B6D0C2DD006C4821B002EEEDB293819985C0D0C82DD58E01741A4236F84D24E3990E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334785, "uuid": "292091c8-a1ec-4610-8a78-aa0338d7e028", "value": "6:ebgfr3w5/KjLNS7TMWk7dNMokevLNS7TM7dk7dNMokewFhFF1:3rWK/NSMWkxNJ5SM7dkxN2FhF3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334785, "uuid": "2b9edaad-58a8-441b-a2f6-869f522f14b5", "value": 280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334785, "uuid": "dd7d9e56-503e-448c-a0f2-ee780916b121", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ad04b92-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334785, "uuid": "58bbd42f-59b6-4246-9208-9c25a3b1b6fc", "comment": "Malware payload (Mirai)", "value": "0ec00bb43d65d22622c05e04725fee70", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334785, "uuid": "575d1b6a-7d2b-4c29-8a3e-da30f34c9e31", "comment": "Malware payload (Mirai)", "value": "a5c50eeba43b16286739f7a4197100e712a55ef167b1c4fb737eb44e551f030d", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334785, "uuid": "3a561f58-d96a-453e-a6d0-64a96500e04e", "value": "T1CA1103CF10A88D72E4418DED32939954E9CD80DE2EC9CE45608E003BB4CCA4D7DA2F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334785, "uuid": "76d898ec-e442-4ae5-855c-e928cc2b0755", "value": "12:3rWKIw+u5ZMoOF7+MB05FKOzKNDNkpjN9YvzHygDNkpjN95zHygDNkpjN9HyTzHH:yRk5zOt+MB0+kpx+xkpxtkpxEkpx8jn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334785, "uuid": "fa9c316a-8605-4bbc-8b23-29ebf93bfe4c", "value": 986, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334785, "uuid": "710740b8-1544-435e-ae7e-1f4ea7daa3fa", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ad51346-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745334785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334785, "uuid": "ed3ce05f-5778-4027-8ce5-acd0c76ab14b", "comment": "Malware payload", "value": "c9f643b48f37b461abf583a499833d2b", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334785, "uuid": "c9c7f559-844f-430d-87b8-f5130295e29f", "comment": "Malware payload", "value": "3db0445e8b0c00653815a80c51f83e145623dcbdea7236d3ff774c0ea74292d8", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334785, "uuid": "044fd1ce-35c2-4209-ab91-3b88cb35048b", "value": "T1CDE092EF006C4820F001EEEDB6838854A1C996A93ED48F09685E4233F88CB0D3D80F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334785, "uuid": "84f25121-abdc-4519-8de7-df074e384924", "value": "12:3rWKLMLZDzMiDNkxN9MxCzMxRDNkxN2FhoAh:y7Z1kbokbiD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334785, "uuid": "98268bb2-06f7-4611-9c06-ac53a78cfaa3", "value": 390, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334785, "uuid": "dda59b2d-d29d-45e8-938b-973f31fd0711", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ae05b6f-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745334786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334786, "uuid": "46f5389a-23f8-43f5-b102-2fc2b3c0ceae", "comment": "Malware payload", "value": "4ef73312a6c20e9e390f2b4d821da850", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334786, "uuid": "0b4ed98d-30cc-4eab-8eb6-71012e6b2c43", "comment": "Malware payload", "value": "a1547f0c162db1e1ba85345784fff5a12da076bf39ad22a2e86a231b489531e3", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334786, "uuid": "57e25f43-6d04-4a6b-9ba8-12a85e183ee9", "value": "T145419BEF01EC4451E441CDAD76E388E4B68D89CE2CC98A4B285F4523B8CCA5F3C94F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334786, "uuid": "7d5e438f-2202-445b-b7e5-a7c70e55d624", "value": "48:4k5CEA0uZtkw4kwof7kwUkw4kwQkwakwukwQkw7fgkwakwoqakw0kw8j:tCEA0VgM0YwC28ACGYT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334786, "uuid": "af602865-b4bd-403b-b5c5-359a51a74b55", "value": 2252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334786, "uuid": "0f8915e4-ac70-46c9-ac81-9247fd3d3c72", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6de4cf31-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334844, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334844, "uuid": "951a2d9c-066d-4fc7-a040-841f8f9b1055", "comment": "Malware payload (Mirai)", "value": "6eebb75979a30a4fa3f353c828e04f87", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334844, "uuid": "564eb2e7-1f94-47d6-b94e-d9f475f1d1d0", "comment": "Malware payload (Mirai)", "value": "2852c0aac4a6cd50d10bb58c786297a96676d45263e3e24b154418d651178ebe", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334844, "uuid": "fca02c09-8af9-49a8-9244-74509097a9ce", "value": "T1F511E4CF00AC8D72E441CDED76938854E5CA84DE1ED9CE49A44E013BB4CCA0D79A1F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334844, "uuid": "aef29c86-e9bd-4418-81cf-2f278b49550f", "value": "12:3rWKIw+u5ZMoOF7+MB05FKOzKNDNkkN9YvzYMDNkkN95zKDNkkN9HyTzHygDNkkZ:yRk5zOt+MB0+ks+cmks4ksEksi6jn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334844, "uuid": "7be4fa66-50e4-4ddf-8476-c81663e55825", "value": 1025, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334844, "uuid": "09eecc64-cae8-4966-83e3-b65d555b1c54", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6df3054f-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745334844, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334844, "uuid": "299cef6a-586f-49ff-a65b-3d5c4e92c50b", "comment": "Malware payload", "value": "fe3b9b22a4a6fd7809ab46eb720d0bed", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334844, "uuid": "572fcf50-f7d9-453e-8924-9e57e7719060", "comment": "Malware payload", "value": "5a82549c6ec4e272b4db9a9b58d38b71c75b4dca1b1ed62775343b5cccd8890f", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334844, "uuid": "a6cc133c-64a1-4d63-be05-09c7ec52e2df", "value": "T1A1110BCF03AC8861E4419DED71938AA4A6DEC5DE1DC98E85206E023BB4CCD0F3853F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334844, "uuid": "542b38b1-a052-45cb-8b44-f650b72a8254", "value": "24:yRk5zOt+MB0paNlk2ypUpmk2yvfk2yoSk28jn:4k5CEA0p8k2Yk28k2Qk28j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334844, "uuid": "e3d09f37-1d6b-40f4-9403-06cc2ac73694", "value": 975, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334844, "uuid": "69870405-3a9e-40e8-ad2b-d91b62d56d72", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6df4624d-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745334844, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334844, "uuid": "6390e79e-d7ab-4f24-8297-262789769d33", "comment": "Malware payload", "value": "92df1b150a8b5e2861c1bf81452e3e59", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334844, "uuid": "35b1e768-bd34-4126-af15-df9d1499c0ef", "comment": "Malware payload", "value": "a321f42ba172b145065299e35f35007815b57f652bd5ab3486ce2a4bb73475cf", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334844, "uuid": "dfc45ba3-0758-4320-ae4b-b0653ed3475c", "value": "T1FA41BFEF01EC4411E841CDAD76D388E4A68D89CE2CC9CA4B646F4523B8CC95F3C94F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334844, "uuid": "4a7e2a1b-1725-43f8-b24b-7dabeac46770", "value": "48:4k5CEA02f7k1Uk14k1Qk1gZtk14k1ak1uk1Qk17fgk1ak1oqak10k18j:tCEA0lNRJ1JPLZ1Pz1q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334844, "uuid": "5e0554c5-1b50-45d4-97e5-6a1d50754532", "value": 2253, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334844, "uuid": "469bb792-6f17-417d-bbb7-25946e564722", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dfaf3f0-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334844, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334844, "uuid": "1dfcfacd-e282-4faf-9df2-5d762a0b2844", "comment": "Malware payload (Mirai)", "value": "1bffbf29984488b80ad70ac8086c74de", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334844, "uuid": "511e218b-d6fa-4e45-b0ea-674675429fbd", "comment": "Malware payload (Mirai)", "value": "76dfc7a1daafba47ccf4517d466f4a800eb96a4643313d387b66cb6260babcb6", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334844, "uuid": "2179b150-b575-4be6-9c78-fbb2dad2b391", "value": "T1104180DF00AC5821E481CEAD37D38854A58D85DE2DDADA4A645E4537B8CCE4D3CD8F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334844, "uuid": "55c51056-9c11-49d7-98e1-1d92c6b94e0a", "value": "48:4k5CEA0+kAgkA4kAEkA4Z1kAokAGkAykAwkAUkAGkAakA0kA8j:tCEA01A4ci4OSUQOiAj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334844, "uuid": "3262056d-ffc5-497c-9cc0-8fb969477ab3", "value": 2279, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334844, "uuid": "2d2e0e67-ee64-4021-b218-31dd9d3899d4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dff2bb3-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334844, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334844, "uuid": "05804806-97b9-4964-ac97-d4b7e3da22c1", "comment": "Malware payload (Mirai)", "value": "ab3d760ec5f2d9ffd977feb2ff2a9ace", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334844, "uuid": "12dfe00d-8f8e-4235-9750-74db6cd11706", "comment": "Malware payload (Mirai)", "value": "a541122befac89974f1a9721876bb46ae68eb801d888df33ace334b4d782c6eb", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334844, "uuid": "066a2f30-6699-4983-89c3-10a521e3bcfd", "value": "T1B41196DF00A88C72E481CDED36938954A5CE84DE1FD9CE45645E013BB4CCA4D79A1F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334844, "uuid": "ad39f8d5-4ae9-4815-bfdc-58211c9c6c8a", "value": "12:3rWKIw+u5ZMoOF7+MB05FKOzKNDNkQN9YvzYMDNkQN95zKDNkQN9HyTzHygDNkQS:yRk5zOt+MB0+kA+cmkA4kAEkA8jn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334844, "uuid": "0cb4093c-f120-4901-b519-94d68113d9a0", "value": 986, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334844, "uuid": "a7cfd961-b6ef-468e-b657-1aff7d09d426", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e1952eb-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745334845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334845, "uuid": "def0c15e-0c3e-4c28-b809-fca5797bec8c", "comment": "Malware payload (Mirai)", "value": "5128f71622eadc2bbef75964c9b6dc53", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334845, "uuid": "0302b6aa-c2dc-4ed8-9a35-1ee3ec660f36", "comment": "Malware payload (Mirai)", "value": "d9bb23601f8409ed30eaa76671416fc93c731f99be986d30165aef4638542190", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334845, "uuid": "2f81ded5-d39e-4f47-8b5e-ac14ba373d39", "value": "T1AB21E4DF00AC8821E441CDED36939854A6CD81DE2ED9CE8A645E453BB4CCB0D3D91F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334845, "uuid": "d1036ff6-b3bd-4201-b39b-032e146d02db", "value": "24:yRk5zOt+MB0+ky+cmky4kyEky4Z1kgokgi6jn:4k5CEA0+kygky4kyEky4Z1kgokgzj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334845, "uuid": "d035e3fa-025f-485c-a667-072e5f317c0c", "value": 1298, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334845, "uuid": "d0b9fd2d-7974-401c-b623-f5172a35f189", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91f5521c-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745334905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334905, "uuid": "459bdc95-9951-4678-888a-154424d1756f", "comment": "Malware payload", "value": "2d379f2cbae7386a92fec888398d07f9", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334905, "uuid": "d98ab7ba-08fd-4fe5-a0d0-372495bfe0a1", "comment": "Malware payload", "value": "ad4bd5691c35f58e93d2cbdbb8521b351f91753f691112d4879b33ac4caa6bfc", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334905, "uuid": "4210048b-4873-4f21-b5d4-cab66219b674", "value": "T1FA11D3DF40A88C21E4429DED76938954E5CDC5DA2EC9CE85649E413BB8CCB0E3892F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334905, "uuid": "b88c1a14-2513-46dc-9fbf-e233f008208d", "value": "12:3rWKIw+u5ZMoOF7+MB05FMLZDzMiDNkB9MxCzMxRDNkB9KOzKNDNkB9HyTzHygDB:yRk5zOt+MB02Z1kBokB8kBEkBa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745334905, "uuid": "e5f24b75-31df-40a8-9dff-f1b40e08e608", "value": 971, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334905, "uuid": "3106b42a-c862-4c3c-a8b3-c7385cd12c60", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "877fb8a1-1f8e-11f0-82df-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1745335746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335746, "uuid": "62da266d-4a44-462a-8876-68cab888f589", "comment": "Malware payload (LummaStealer)", "value": "7130061ab2979c9b798c31ee036bbaf8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335746, "uuid": "b9e90bca-d462-4d7b-956f-8cf996e18e6e", "comment": "Malware payload (LummaStealer)", "value": "ce1b7f3e2ce69795c44d5c7c39cd95c8040c6e5c64655d9c46d5fc7ec30c0859", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745335746, "uuid": "8f43fb97-fc23-4b53-b96d-9dca30504d0e", "value": "T10965E029159593EBF29250B27A05B290B073F973863D5FBF80F0E3290547ED41B6E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745335746, "uuid": "c8f09c05-a163-4fb4-886a-15604639c6d6", "value": "130d5621ef2323889c6e1ed2746329fe", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745335746, "uuid": "3d630ecf-3138-4b56-a308-44a7a747a041", "value": "24576:sVoX38bcWaK10TflaocpSg8HM1NW5hWlSpSg8HM1NW5hWlm:sKXMoWV1qaocX8HMq5htX8HMq5hH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745335746, "uuid": "32b37305-2ff1-4cf0-96c4-11c8ce716a4b", "value": 1433600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745335746, "uuid": "ad63798f-55db-4b14-89ca-c4ebbb7abe6b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8abc49ee-1f8e-11f0-82df-82aee05be84a", "comment": "Malware payload (GOStealer)", "timestamp": 1745335752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335752, "uuid": "889f2af8-832d-4843-8e4e-0e40433f3e48", "comment": "Malware payload (GOStealer)", "value": "ff4929b3adb5ab979408e09b3f7bf723", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335752, "uuid": "091bcc66-bb68-4ea6-834b-11b0985fe44a", "comment": "Malware payload (GOStealer)", "value": "8953c494ae38623a62bea5c6705056fd8dce59f88f1d3c2b5da89cfa71f620a9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745335752, "uuid": "401d5e94-8a51-4e11-958b-ce3eb87a1fb4", "value": "T15C86333290D5F30DAA9058B9D897FAF544769EEACD30130BCF95BC477A72AA037316", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745335752, "uuid": "0561d004-808c-40af-a47e-28bbfcd481a9", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745335752, "uuid": "d8084d02-cc23-4ff1-bf43-d051a0627f65", "value": "98304:E1Tex3ATmJe8Tv0oBmaB7Yvp29rdtq8Owmo9sEOdM1c/N/LdHILRRwYEwxM/wkKm:E1TepeFkmaOBArIZdyCN/L9ywYndiVT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745335752, "uuid": "4af32ed1-3f95-46c3-bf29-86f775ae61c6", "value": 8514560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745335752, "uuid": "7cd352b6-7f75-45c4-93de-30d642538263", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1678969e-1f8f-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745335986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335986, "uuid": "5014ff62-4790-4c60-8c6c-a9ca241dfd6b", "comment": "Malware payload", "value": "30108cc0ba151e5c070f4e1e337c2ebe", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335986, "uuid": "065496a6-26d5-4230-878a-cd43df8427f2", "comment": "Malware payload", "value": "e2d98e8edba7f3e559b5049c2e4d8c45fcf28f2e1e975a1a8d7310f4266d3173", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745335986, "uuid": "dfc46b3c-6129-4e63-bb1f-6071985ddf8e", "value": "T15B6423ECDFD4D8981257317C920A7C8E8B84CD214C2E6507AFB312BF95AF603EA5B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745335986, "uuid": "0d67c474-8609-4b47-b240-83047873f3a1", "value": "6144:STM/zVyChvuUVsDDWHlvlEhCAZHxwq3EYD4YIvwEseP:7zVVuUVsDSvEhCiRwfgUvwI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745335986, "uuid": "da8f150f-80b2-45f0-ad3e-857f0b6c971e", "value": 324160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745335986, "uuid": "d9670289-9a36-4b45-bf37-117fc4def93f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16a75316-1f8f-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745335986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335986, "uuid": "216fad2e-9486-424c-b61a-4421ae13c95e", "comment": "Malware payload", "value": "e3f6eaa8d95a2436c132753e7c2289e2", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335986, "uuid": "93257570-ce57-410c-8b2e-5eaa11c09072", "comment": "Malware payload", "value": "a0a292644e504dc634a59318133c8b776fe0f3d867b870c869cbb736e9a32e47", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745335986, "uuid": "2660013b-6d57-4104-a71e-4d72ab086fe2", "value": "T1876423D611D520C1FECD08474940BA89438BEED4873876F4EFA5B7707A5EE2409E0A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745335986, "uuid": "ec0371de-480f-4ede-bba5-42b76fb4f2bb", "value": "6144:7b+aSigY2A59XZQob3voHvgiIhJzA/NCnF2WnirKPxZobD0OZcxBl:7CaStArbvoPsRA/sFqgOY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745335986, "uuid": "9140f228-0a84-4ddd-b4f4-2bcfcedfa676", "value": 324160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745335986, "uuid": "a12617e2-7a17-4b53-a7e1-80a28c6b90d3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e563d24c-1f8f-11f0-82df-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1745336333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745336333, "uuid": "d2b670ff-c4f6-4aa7-8269-935aac858408", "comment": "Malware payload (Healer)", "value": "f865868a6e1c382fd91a7a77f54c66ee", "object_relation": "md5", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745336333, "uuid": "d042e9f8-5ddd-445e-afff-52625fb40640", "comment": "Malware payload (Healer)", "value": "3b3a4155cb41aeb42781de256ebb26006e65242bf39b07d048ec39f72acae551", "object_relation": "sha256", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336333, "uuid": "624b239e-5a7d-4580-a527-d8e347b2ee36", "value": "T12C8533173DF9E113E0AD3D35564596A4B3605E03CC26BF2B0866C677C2B6B3E8DA60", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336333, "uuid": "f93f7a2c-0659-4b15-a6d0-dc30b87e00c4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336333, "uuid": "b6d55ab1-93b9-48ee-970e-2df9c85ad97d", "value": "49152:AEFTJSI7od1JCaOBzA/vlEmG1N3dBsK/V:lVJSIYoLSvOmGL3H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745336333, "uuid": "4bdfbb03-14e8-4c0d-89eb-61a234948398", "value": 1750016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336333, "uuid": "e291b523-928c-49b4-87ca-df6aa80ca93f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c75eb98-1f90-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745336426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745336426, "uuid": "164e3354-1f7a-44b5-ba99-53723f2f5050", "comment": "Malware payload", "value": "e4bdb389f912ce5fff3c9f7acc4c2902", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745336426, "uuid": "35c8adc0-3d21-42d0-a4d8-2fa61681bf70", "comment": "Malware payload", "value": "32597a6e985440fa763831f30a52d7adc544dc8ebb235e55ff878078d55ef97d", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336426, "uuid": "d09b27ff-9248-4403-b6f2-4d74caa62545", "value": "T1828533426EA718DDD9A8063FA67A061DB270B9E41394FFCD0765404AF033FEA1B368", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336426, "uuid": "22d56d9a-ff07-42c5-bb87-f0ee057f7c36", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336426, "uuid": "ebe5e9c9-54ca-4ad5-acf3-832b6928197b", "value": "49152:WYN2GwrFW6GK76BeV1ipiItlrJK8J48kXfS0GKB:WYN29rFWsuBe6ogpJM8kqKB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745336426, "uuid": "2eca8a6f-c1e3-4387-82f8-a3ab05270b3a", "value": 1857536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336426, "uuid": "eadbfc51-b14e-4e3d-81d8-198d3f3d4b10", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3dbaae05-1f90-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745336481, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745336481, "uuid": "4f68b9f7-5bf5-4ad8-b241-f9854e64a605", "comment": "Malware payload", "value": "0d899eabe00a1cdbf38ad2f834c57f16", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745336481, "uuid": "929c7b36-5b66-40f8-8954-4d1c9cb60254", "comment": "Malware payload", "value": "3826d2b0905d344d8ea9810cff9199de95becee96dd99476d239aa1300b4f483", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336481, "uuid": "f81ac6f8-0a9d-4eff-8a5c-e5016d403c32", "value": "T11F263390EB32D3AEFAC78072BCF386818471147E5B39786B1527C9697A63C79144E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336481, "uuid": "deb5b4ce-3cce-47a4-8eb5-f134ade34255", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336481, "uuid": "8f8cfe2f-6027-41fb-a6e8-ed6c20de7044", "value": "98304:96Y7qCvQkTLC31ee6H/YSN0D3l7knYSKqx7xkREj+09lS2EXKm:937qCvOIe6fNN0x7knFVDBOK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745336481, "uuid": "7149ffe5-1dcc-442b-99ba-ed50899a4488", "value": 4594688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336481, "uuid": "2e5344e6-95c9-49dc-9edd-5b406060c135", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "809c1c7f-1f90-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745336594, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745336594, "uuid": "7d6d3527-404f-4100-b766-d75d9df16d62", "comment": "Malware payload", "value": "2bcf0258b903787c9542f1de06185b69", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745336594, "uuid": "d03a1376-5497-42b0-8064-a22203c84737", "comment": "Malware payload", "value": "6f82206f18e7551e17a09f300f96001caf64c431b55ae7ee9f810cf4898802c0", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336594, "uuid": "5c1798c6-4f02-40c5-ae31-c6d12f26ad2d", "value": "T19B159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336594, "uuid": "6c0427f5-5fb6-4c01-9aa2-9358ba7bf013", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336594, "uuid": "11af9adc-970c-4f3b-909e-39a63421e68c", "value": "24576:0qDEvCTbMWu7rQYlBQcBiT6rprG8aeEV:0TvC/MTQYxsWR7aeE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745336594, "uuid": "c5f0aaa9-efda-4f1b-a344-e594784abf8f", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336594, "uuid": "1d506a1d-7a7d-491f-9127-b71fd5d640c4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9074c83a-1f90-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1745336620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745336620, "uuid": "17d98c0d-e1b7-41a0-9c87-66def58b34c6", "comment": "Malware payload (Amadey)", "value": "8861679ef8347b394409e3d6db0acbef", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745336620, "uuid": "3dcaf53e-7fe0-467d-a0a9-9851a6df3306", "comment": "Malware payload (Amadey)", "value": "30ed42f2ba7de726c8868b832e614882f0649457e556205b0cf7424701278267", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336620, "uuid": "29fcb88d-b08f-41b1-981a-c20f02185cfc", "value": "T1A0A53306F2F89412FEF083B1187B23972A72BD506D39C6C7439A586D5CF32A576B27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336620, "uuid": "38e6b9fb-3a2d-428e-a6d4-317db901b4eb", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336620, "uuid": "97747836-c493-4b96-a224-2045e81d6e21", "value": "49152:4tIWqa2a1YMHeeKGVsLx0bWL61pgsXZ0rl2n4NCXp8GnapFaLU6JO:/A2a1YM6wYxJmdXZ0Z24gXp80aC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745336620, "uuid": "69f829c2-9971-4fca-9208-8e1fc466e324", "value": 2165248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336620, "uuid": "25d1c805-b6bc-4e48-8f00-d841a23fbf00", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "434e2609-1f94-11f0-82df-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1745338209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745338209, "uuid": "3ff856b6-65ac-4fe3-b1b2-a176236c9201", "comment": "Malware payload (RemcosRAT)", "value": "42a49946c3430858b47b1eed25f04eaf", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745338209, "uuid": "3a6e69ef-0cf3-4d24-a047-0a5e0bc103d1", "comment": "Malware payload (RemcosRAT)", "value": "aea8b0d73e198c06aa3f916533376d1a66c4bcda353ed736ed3aae6f4c25ea14", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745338209, "uuid": "ca7cf51f-d5b4-4cf5-b9e8-f58908fb06b0", "value": "T10C25021549C87FB9CF9C5A1890BD2B1D53E05A4E542AB58AFB33BD0BAFFB60042171", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745338209, "uuid": "04022cf1-8c3d-4f1a-89b1-9070e527e2bc", "value": "12288:k1Ym0hRr1K9c3PCo9g0NGGUr9IMua9yBOYicp8bkhxspG0w1BtYJm83cTmiHBVdl:BLrA9cCXl9J5OyGdHBtV1DHBVdl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745338209, "uuid": "56c4f503-98d5-4933-9759-ef13e81f6b9e", "value": 982004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745338209, "uuid": "e49dbf31-f578-494f-9fc4-ad933feee81b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afa46eec-1f94-11f0-82df-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1745338391, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745338391, "uuid": "532f39a1-e5db-4641-94a9-e3ae4a3e2909", "comment": "Malware payload (AsyncRAT)", "value": "a4e998783679ad77e70babcbf4c7f3f6", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745338391, "uuid": "98891886-d10c-4d40-9ccd-8cf105b3f6b8", "comment": "Malware payload (AsyncRAT)", "value": "615439678620a389b77803cb4375547111f8ee29bce207fa2a54d0c751049d45", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745338391, "uuid": "bb9c74d5-6b40-41cf-a06d-b5697a43cbfa", "value": "T1AA236DF60613ED8F8B370E46E40C1106DCA8BC63359694BDFF0446E95AE49189E79E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745338391, "uuid": "9f239eae-9cf2-4686-a054-91d49aa1dcd2", "value": "768:Y/axIewUvGj0/Uvr21aQBb9BeMOlp0CzBAfkzTHH7eOzb3QeC+Vs:Y/axIewEpUk5BXe9lp08A8v7e8b3QeCz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745338391, "uuid": "68f2d2d3-53b5-43c9-801e-6fb5fdfc4223", "value": 47104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745338391, "uuid": "c59c8ffc-c7e1-47f0-84c7-b23fd2966938", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c745bfc-f38c-11ef-a514-82aee05be84a", "comment": "Malware payload", "timestamp": 1745338391, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745338391, "uuid": "50878086-0269-4525-9850-dca196834a2e", "comment": "Malware payload", "value": "1e0d87c4ec6132d5bf05afabaa7f4aef", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745338391, "uuid": "6d574c0f-d1ad-493e-a26b-1d865f460646", "comment": "Malware payload", "value": "6305d0fa3c60de876cab18e33f607ec51a2a6f9a8fc9f972951eeead35a69abe", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745338391, "uuid": "d82a133f-676b-421e-8c17-5af07bc9fbc1", "value": "T17CC63312335BC737D82E5270393AA64A1066FE774B3180EBE7896D1DECB51C066BCE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745338391, "uuid": "7e11b908-e7b9-4796-901c-badfadaa1aca", "value": "196608:a6eKvNR5eaFhnO6S+eydkQeoAVVJAeBbfWRuWlT6mqjLMZ+O6cP4vTHiZ9gnqa0A:a67X5eUHSZQZAu3Ea3qnRXLiInqrx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745338391, "uuid": "e246bdf8-0e85-424b-afee-c48672f270b6", "value": 12018176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745338391, "uuid": "3d88f3c5-07af-494f-be70-42e522874064", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4023e87-1f94-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745338505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745338505, "uuid": "9558c8ea-3a07-44e0-9bf8-e37976dd301b", "comment": "Malware payload", "value": "c6a62bcb198e2310bf49a5cd69daa767", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745338505, "uuid": "dc8f7239-6113-47f1-ab94-09a3b540f586", "comment": "Malware payload", "value": "a99abe9de472d7d9d6fe761d98796bcea3b4d926f8474d1616b6350ffbfd742b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745338505, "uuid": "6ccb7fca-cac2-40b8-9c13-f8a3c7b83b6c", "value": "T123A5129AD48AA05BF181B73BE0294E4D746098FE59BDCF6C0E21E1D17ADF680F4DC8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745338505, "uuid": "11daf27b-9890-40c5-9a51-00a47abed791", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745338505, "uuid": "ac6ab3ec-4ac6-47fd-8ebd-3741ed049ed1", "value": "49152:F9zt9v7iflmEcSODUiqiBWpMQI3D3qUk1Yy62YgR+MaOdNLBEKDjtTP:F9zt9v7iflm1DmiguD3qU8YyFwM/vDj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745338505, "uuid": "f12fe3d1-f801-4495-b481-fd421c7d4d71", "value": 2094592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745338505, "uuid": "7f60c74a-8143-48d0-ae9d-e47442d295c6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b5f15b2-1f94-11f0-82df-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1745339905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745339905, "uuid": "be9aeb21-0812-4a6f-ac00-512ee082693d", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "76414f0ec361ae65cf6d5128eb461d14", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745339905, "uuid": "2c28ad56-ce65-45a8-92a6-a187761d55a3", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "7df37920798204c7112241217c5c958ba28679c128f0af169e8cc832d71eb12f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745339905, "uuid": "77425e3e-3d5b-42aa-804e-a651ea9f344d", "value": "T15BA533946D6114E0D6EF0FFB77379F33F728181D03DA6B6A9E8CE76A08058492DDA8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745339905, "uuid": "3f4e4c5c-5342-4e36-8605-af2b82daee7b", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745339905, "uuid": "2d985401-c6d6-4bb2-93ed-444456ecc00b", "value": "49152:/UCIrwwM6EfMcoY0i4y4mVv+2OJCtZbTf5H22O9Ffsy4a:sCI7M60MTyVVkIZbTfZ259", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745339905, "uuid": "264359a6-9314-44ff-b0fb-3d99194a67fa", "value": 2162688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745339905, "uuid": "41fdc83c-69b6-4ddf-be47-d6c47b8b1cc5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94099dbe-1f98-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745340062, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745340062, "uuid": "c5ddaff2-e620-4efc-bf5d-3ea69104a8e4", "comment": "Malware payload (Mirai)", "value": "7e14eae8b7c4132115d6554cb3b9cadb", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745340062, "uuid": "fb2ccc3a-3f95-4608-bf6a-76a658594c2f", "comment": "Malware payload (Mirai)", "value": "a88f5c082f144f3734607028d4d14449dd20556e485691ba17e9e592e091d841", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745340062, "uuid": "826f0060-7e1d-4e74-a991-dcabe7ef337b", "value": "T1C393181BBD81AB11E9D622BAFA1E614D331317ACE3EA71029C149F7477C791B0F3A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745340062, "uuid": "945b6dd8-2cf2-41be-87f7-82b11f9d53be", "value": "1536:8Onn0kFCF65/qjtLMVaCKh5Ss5mcZixkSJEjUuWllsTi+sYa183jv/Y7DTCy:eqSjBSwSymcZixkSJEl/sYa18Tv/ITJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745340062, "uuid": "9f52cfc1-b5a3-4721-9238-3e9abaedfa56", "value": 94212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745340062, "uuid": "0851f159-de65-4dc5-8b68-a63b3a76cb65", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d48cd16f-1f98-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745340170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745340170, "uuid": "10bee370-1fd4-40ba-ba20-53402e7294ac", "comment": "Malware payload (CredentialFlusher)", "value": "70b72399d73fcf8176b8837003543dbf", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745340170, "uuid": "f5735005-78f1-4b0b-ab32-6769493d5eec", "comment": "Malware payload (CredentialFlusher)", "value": "193776a332f6c9608fd616eb9cdb2dfdb29be8f44d3a0e0669a6dccac86a2c11", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745340170, "uuid": "ad94d91f-6011-4554-a8a6-5a53e1c830a4", "value": "T13825AE027391C062FFAB92334B5AF6515BBC79260123E61F13981D7ABE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745340170, "uuid": "b6933a3f-f5b6-40e9-baf5-7e240a501c9a", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745340170, "uuid": "48f51dc4-7a61-4617-9b9a-7fb163a6543f", "value": "24576:dqDEvCTbMWu7rQYlBQcBiT6rprG8afsSt:dTvC/MTQYxsWR7afs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745340170, "uuid": "c524dc35-566c-412d-bb71-5b52a38d78ee", "value": 970240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745340170, "uuid": "ff8856d7-99fc-46bd-aaeb-5e5840460d6d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "922469af-1f9a-11f0-82df-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1745340918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745340918, "uuid": "b78533f2-d1d3-4178-844e-b6cf13afc300", "comment": "Malware payload (Healer)", "value": "cf9260a0d663a68dd61a369734be74ee", "object_relation": "md5", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745340918, "uuid": "69daf324-16bf-432b-a638-e46ee87c10fb", "comment": "Malware payload (Healer)", "value": "46c2dbf240eea92db291de12879f8ee9580aa08715c3c0baeda9acd0f0610db8", "object_relation": "sha256", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745340918, "uuid": "84b7ea91-279c-4e9e-8172-cd46bb90ff64", "value": "T1A78533889D2371FBE4AA2FB7C797439FBA740E3542B41BD252141F31C506E6075AA2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745340918, "uuid": "fdc80fab-0082-490b-9443-a398f7f59b32", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745340918, "uuid": "82bc46ab-4d54-4311-963e-a5a0b970a0a6", "value": "24576:wDVe1bQpBSxaOvcKnIopRY72pQd6Yic1G0XD+SKwn2CRkGI52RUG5Eub4ohJMV:EVe1oZOvnFYKsNG0XjKwn2++yULq4oY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745340918, "uuid": "f159badf-f6a0-43ae-a51b-3e4e972361c7", "value": 1773056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745340918, "uuid": "4f6965e7-172e-421b-92b2-887c1fa1fd5a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0685b455-1f9b-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745341113, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341113, "uuid": "7af79b6c-c667-4180-907e-b078c30bf67d", "comment": "Malware payload", "value": "f9f77c34995d7e8758d8c32786e6ce13", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341113, "uuid": "5a7dcb51-0180-411f-9e87-01a21dec660c", "comment": "Malware payload", "value": "5ac86c252a89703a66ac1ebe92e4e1f43c3bf5c1970c643d4e99ab0744e87b3b", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341113, "uuid": "efd1555e-5687-4729-8b7f-28ad2f600451", "value": "T15193E81DAF610EF7D86FCD3701A80702349C6B4722997BB97974D928F64B54B0AD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341113, "uuid": "99a3c444-2dee-44a2-bdba-5e674ef62267", "value": "1536:aYIH/vg6TSTcppJE2nup14glbpmFZZ3kqhnxTwKbZxKq6DjIcm8rNZSR:aYy/46TSTSLfn4bpmtTwKbGBIcmOfi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745341113, "uuid": "411a362b-a77b-4eb8-8577-06f5999c31ce", "value": 97016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341113, "uuid": "ab621e72-e4b9-4deb-96e3-d4a2e04dc759", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12e695af-1f9b-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745341134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341134, "uuid": "eb965b19-de94-42e3-93b5-ff8c4868ff44", "comment": "Malware payload (Mirai)", "value": "a48f1293987e6474b1a75e6db245d57c", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341134, "uuid": "f9a4bc5f-d421-4172-95c6-9f47843333ba", "comment": "Malware payload (Mirai)", "value": "c888a4154f116ec8ac7f5627e9baecf634d5df78c55ad4bb18bdd22ae895f0a7", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341134, "uuid": "3463ec91-e0c2-4e3a-8289-082c448d606b", "value": "T1B283181BBC819B52DAD212B9FA2E614E331317B8E3DF72129C149B7477C39670A3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341134, "uuid": "8ea75f1f-1787-4bb2-b626-b2347692d312", "value": "1536:l4nDvPcasCLuoSzvb4Z/oWQZQIMNiQ9Uz0E8abz4zVh5JYXC7:kqeulbWg29Uz0E8abkphje4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745341134, "uuid": "16228bdb-cbf0-4a51-a5d4-4739b31e18cf", "value": 83364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341134, "uuid": "8e3c4876-b2bd-4eb2-97b2-535a539cc762", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2b73121-1f9b-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745341429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341429, "uuid": "acda7e7b-5edf-4d14-8e70-dbbe879e46bf", "comment": "Malware payload (Gafgyt)", "value": "da46636bf34efd91014109a5eac9b069", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341429, "uuid": "fbd4e737-5686-4a6c-b26e-859a63336e9b", "comment": "Malware payload (Gafgyt)", "value": "95a8886d3b32099e7917da826d7442062ba4f4bdd206f8ad83baaa902c181f1d", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341429, "uuid": "cb1631d6-7dd7-4726-a8af-c9089ad6a3c5", "value": "T1BE539D93C8652F4DE162E2B070B9CA75C313D45092876EBA19AAC3BC9483DCCF54A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341429, "uuid": "b3f28fed-d33d-49fb-a9f4-ecb575a1cd8f", "value": "1536:DYNXqAMSjf86jiVX3JBivXCQK6Bh+bfxf7Ck:kCRX33ivXK6gf7/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745341429, "uuid": "57a88b32-9b18-41e1-83b5-6c540191cde4", "value": 62892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341429, "uuid": "47b5de56-b099-4111-ad58-1ec593044f42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edb251d0-1f9b-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745341501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341501, "uuid": "2c6e9c3f-f897-4249-81c4-98dd33bf3724", "comment": "Malware payload", "value": "bb52cf55debec49f0a7566a826cdc931", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341501, "uuid": "91cbef09-97c2-4958-992c-533fa5286cbd", "comment": "Malware payload", "value": "4887688d8520104e948d4ecb0869a46c7852ec48cb757ce302d32143ddced1e4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341501, "uuid": "f56484ce-3d76-41a6-b969-4559737b4ce4", "value": "T114E26C24DB1AA477CCC812FC574726B88718819A8574F793493CE8215EF174CAFA23", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341501, "uuid": "43bf1e1b-f33d-4d89-bad7-6b0bfdb621da", "value": "768:a8MbEfxl0FCkoLQxOjVa00QpND0KtS+mYCS:a1I5l0gkWVazmNwEtX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745341501, "uuid": "68f26210-03f5-48f3-b847-1253d87f4cda", "value": 34040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341501, "uuid": "2dd2eba2-a133-459d-970c-9d8194910419", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "032c7c00-1f9c-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745341537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341537, "uuid": "2ad587ca-c9a9-400f-bc94-e124a21dc7d0", "comment": "Malware payload (Mirai)", "value": "b411b6539391b0b7dc1a30aaf7d53e5d", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341537, "uuid": "aa7b22f0-cf6f-409b-9bdf-6ffa1c1a2dcc", "comment": "Malware payload (Mirai)", "value": "f14cdecf9a1b3f01ea0ab9fbf99eee5a03ade5f144905cd55f9cc2c612ab5341", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341537, "uuid": "136b0e9e-d048-422d-b12b-43d26cdf8bd1", "value": "T108531840FD4784F5E84318B098A7B33FA731C9448235A72ADF99DA3ADB336129B167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341537, "uuid": "56ccc55f-c683-40dc-8dd6-77e79d9a2b10", "value": "1536:g4c1qHo2xY498a/Lh9rXNXIQXNW4KY2Fdo5eU:g4m2198ajh5XNXVo3YmE3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745341537, "uuid": "8052ba8f-8128-4bb2-ab8e-49fc3a9a60e8", "value": 62688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341537, "uuid": "fd1a515e-d16b-48cd-96bd-054b5690f8fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "265e6459-1f9c-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745341596, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341596, "uuid": "e05bd53f-1ee0-4332-bf8b-510ddfde4987", "comment": "Malware payload (Mirai)", "value": "6d4d440c45423ced28ef91c4a6ac9e66", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341596, "uuid": "faf8fb2c-0a84-483b-8950-05c5448d432d", "comment": "Malware payload (Mirai)", "value": "e91c3293496de794721dea59026ad9f206304c5be2897338e31c23718f6f344b", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341596, "uuid": "3295259f-06bd-4c2b-8820-6c2d509bdd6b", "value": "T1A9634B16BD41DA16CAC66176BB1F524D371613A8E2EB3303CD15AF757BC782A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341596, "uuid": "8bd110ca-354d-4918-a84e-e96688cd839c", "value": "1536:da6p+AxLnJKk6jRY0v8naQ4oHBBOUKzuYe6a5FwbCk:da6p+AxLnIk6jRdYooHCuY85A/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745341596, "uuid": "a2e1af6c-7c77-4df7-a9bb-be7d770f4806", "value": 66992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341596, "uuid": "88e8bb53-c2ac-4eb2-bc7f-2c26c1bf423c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7836a60e-1f9c-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1745341734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341734, "uuid": "bdda8b31-eb76-402c-8dba-f647b1fd51aa", "comment": "Malware payload (Amadey)", "value": "ed18b59a993ab27b1b01a29ee2d80136", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341734, "uuid": "d274915e-1f93-4752-b0b3-a8709957bdc4", "comment": "Malware payload (Amadey)", "value": "50ee90862ed95257720923e3b9f278eef7da8d305387e492707558c733ff9de1", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341734, "uuid": "107f1501-0f87-4622-81e8-00c3c1fd7d26", "value": "T13EA5330BBBEC4136C87917B402F605C70E3679172638527762DABD5E0E33671AA363", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341734, "uuid": "07e249ca-5252-454a-b00d-3fa1be2be4ea", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341734, "uuid": "269160e9-2cf3-4ac1-9b89-9b501ee7acf1", "value": "49152:vhIWqhgT8NNSK5O7Wp5+YrnUvMN/PCOjToSQMn535CG4LlHSY:GXg1K5OKpi6PCGRQo5358Zl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745341734, "uuid": "d1489d9a-ccfe-4f63-a0f4-95320528ee22", "value": 2194944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341734, "uuid": "8f2ff073-e46e-47f9-a34a-06fe0c11eff5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4cf2f57-1f9d-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745342238, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745342238, "uuid": "7653fec1-3c27-417d-9671-24a1a65a346b", "comment": "Malware payload", "value": "ff03f277411d7a8cf583a99ebd977f57", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745342238, "uuid": "c9ca95cf-3167-48ea-bb1a-2929430827cc", "comment": "Malware payload", "value": "458a8f5cd03890023667ff2d92c37c0b14d3fb9d90ef3bd7c9670e044db22103", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745342238, "uuid": "971892c8-9b62-4b70-a213-c81f352ee923", "value": "T1A2638E40B74C0D93C2237DB0393F2BC1C399E59131B5D6492A1EAB4A90F6DB2D685E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745342238, "uuid": "5c8c04ed-33df-404e-8235-f8c110437453", "value": "1536:XShIBI9RCm8KBXFH9dAzjzVk6E7ClwqIchIljXaqUXeTCwi:TwwhI9K/k7i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745342238, "uuid": "4ec971e0-6982-46d8-9040-41f6708bcab7", "value": 71184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745342238, "uuid": "cf32c364-014f-4654-b7f3-fdc25e463f51", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42963588-1f9e-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745342503, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745342503, "uuid": "a18cf55a-58f7-48c5-8828-3ff2efc4fbf4", "comment": "Malware payload", "value": "587a7cf9418cdca8dc60ad2f6bd8f076", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745342503, "uuid": "7c2cb7d2-ba06-4fe9-a3e7-a74f03ae737e", "comment": "Malware payload", "value": "3ef111ed91657531e4028347242da660769017311351b9ee3c364fd3d9fd735c", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745342503, "uuid": "a0d01944-9dac-46dd-bc4d-dc9245d8911a", "value": "T1C2159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745342503, "uuid": "d0d1a48b-25e7-4d88-80eb-4e69a202388e", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745342503, "uuid": "f6de16fc-f9af-4596-88cf-71308937a658", "value": "24576:rqDEvCTbMWu7rQYlBQcBiT6rprG8ae2V:rTvC/MTQYxsWR7ae2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745342503, "uuid": "77fcbc1a-6b2b-448d-b41a-2fbc79b45135", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745342503, "uuid": "a35459f9-c7e7-40b3-b5e8-387b7f871540", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72400c6b-1f9f-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745343012, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745343012, "uuid": "955c5230-7ada-4c90-8af6-006a4a343676", "comment": "Malware payload (Gafgyt)", "value": "44be901baac43be91f432114f1e02ba5", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745343012, "uuid": "aee3182e-873e-4f74-8418-9b32059a8c4c", "comment": "Malware payload (Gafgyt)", "value": "41353d21cfffc533bde57fc62706dbd37635ab543634dd958703c7b9f5d32710", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343012, "uuid": "d6c31a88-0ad2-44ca-952d-f03251fadc6b", "value": "T18493E65A2E329FAEF37DC33447B70A31D26523D626D1D785D2ACE5051E2034E582FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343012, "uuid": "27f5f1a8-9357-43e5-846b-646c52ec5206", "value": "1536:JXw0wwMPzCzy6/120lXbVrP2ARYc4AKbV0PVysExeDpX91VuVsArjPUe4CmMqS:JXw0wwMPzCzy6TSyVysExeDpBuVsArTH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745343012, "uuid": "35270613-c4e4-4918-81fb-8e7ede9ca619", "value": 93480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343012, "uuid": "d5f4f6e0-b787-48fa-913c-e1a859ebac59", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d6724d5-1f9f-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745343084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745343084, "uuid": "82010158-541e-4bea-acf1-8c9556e46d70", "comment": "Malware payload (Mirai)", "value": "64875f3805db9e13ce8239a8539ab004", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745343084, "uuid": "80fe7129-93bf-4b88-9189-a9e4c6e0e613", "comment": "Malware payload (Mirai)", "value": "2185bd0f8c23de7f169e3a6bfccd0f3d97331e97c9313a32c308f7670ad9d29f", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343084, "uuid": "dbeb93d6-560a-4ccf-9249-c93de74d0dbf", "value": "T137634C06BD419A16CAD66176FB2E428D371613E8D3EB3303CD15AB7477C786A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343084, "uuid": "777a61fa-b92f-4720-b91e-87d670be7ffd", "value": "1536:jpJIp6AI6Qmqxt2zGo4n2BOOJpfmN3abC6LvZCku:jpJIp6AI6Qlxt2zkn2HmNEPZ/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745343084, "uuid": "631d783c-9e57-4959-90b5-8b9b61dc278f", "value": 71088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343084, "uuid": "5ef1ecb4-4d4c-4db3-839c-0289b86eb326", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f89dce5d-1f9f-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745343237, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745343237, "uuid": "f5fa049b-3c4a-47ea-9ee1-423a6a159290", "comment": "Malware payload", "value": "365f339c245904c5ae6017fe0155f517", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745343237, "uuid": "00324f7f-8e08-489f-9ae5-c6f6450b54f5", "comment": "Malware payload", "value": "7495cbcacedaadd3d8a0831f024a09a92ad21960ac5e634f68502cb6c9362edd", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343237, "uuid": "0af78583-ae56-462d-96d8-fe4070b7bec2", "value": "T11E26336B24C0E197C4365ABB49EEDACE2775E994C09214B10D2D03B63C7919762F2C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343237, "uuid": "c6870ad5-908c-423c-bc44-a227a7d25b55", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343237, "uuid": "18380c49-bf27-4b52-833f-13a4e87d4356", "value": "98304:tBblf/jicB204QnmzBcR9vx/46IY5qZpsnadVyY4L/yCbelP:fblXjt226y9vx5IY5qZWadVk/yT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745343237, "uuid": "3df292ed-46ea-407d-aad4-ba961869f1e7", "value": 4617216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343237, "uuid": "73e43be0-a597-4f44-9511-82c683334481", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d2b6cb2-1fa0-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745343299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745343299, "uuid": "1d6f182f-a382-4424-9b38-fa41f24cec47", "comment": "Malware payload (Mirai)", "value": "14c341117eac4c73dfd4e8f98f870cad", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745343299, "uuid": "d807c800-b840-4042-9034-5b1534e0e864", "comment": "Malware payload (Mirai)", "value": "aa67a9ef8163d05b6848c3d8c923c28af2b7956caef7111d27148868c3d53107", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343299, "uuid": "f22a0f70-d24d-414b-afc2-46df7e4bc29a", "value": "T1B2536D03BD9080FCC494C2785A3EE53AE872B9BC123D7A5977C8FE666E19A105E7C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343299, "uuid": "bfecfd6b-7996-4601-a5f4-583f307b550e", "value": "1536:j0639GH8KBjw+A0xscDzyFjRCvuN5y1I:79GHlBU9cD+fCv25y1I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745343299, "uuid": "6259f10f-f14a-41a1-99fd-92b06cb11bad", "value": 66368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343299, "uuid": "4998244c-265a-4165-987b-8d2054aac4f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7e292cc-1f9f-11f0-82df-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1745343512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745343512, "uuid": "9f2a083f-3d83-49c5-823f-a5c6a0ed20d8", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "bba5dfd8b584b79b797a5a074ad0f7f6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745343512, "uuid": "9999c3c2-1404-4428-b265-7f5f13cea920", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "8629756f5f8a6d6eca2b90a8df1555429493ce7e553509bb1c8f538bef9b83af", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343512, "uuid": "ff133f26-27ae-4bdb-9558-f1208ef3cd66", "value": "T1F8A533F638AB5572EE49C638D17B9B88BE3DA0C381C6D74B69023BB451AB3402DD47", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343512, "uuid": "3f1f5192-5a00-48b4-be0c-476587aab0ea", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343512, "uuid": "c8e53b2c-89a3-407e-96e5-3c6281735278", "value": "49152:4yL6jHsLgdmleJU1EFtU3DRoiXwgn7e9MZGAJz5ImumJdG5:4yL6jH8gdvJ3FtU3Dein7eWZGA15ImdU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745343512, "uuid": "34b3ea25-d719-486f-b1e8-fe776323006a", "value": 2170368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343512, "uuid": "80546baf-e521-40a0-9466-2e38b11c3b0e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e9be08b-1fa1-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745343945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745343945, "uuid": "e7cf3b8e-b195-4a1a-bc0d-f073617dd178", "comment": "Malware payload", "value": "d667ccb18e34cc1e3968673feda62e60", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745343945, "uuid": "4a491d56-7755-464d-aa27-bea497d8000d", "comment": "Malware payload", "value": "906dd28c127df8d30f9640969000f31485e91d81328163f822c9588f729d5297", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343945, "uuid": "9a6b6aa5-c298-4b3c-bb62-701bd726e31f", "value": "T119A5221C09C1B19AFE3FA1F1A3ACC7F8776F54D5166F9B9B496B8428413380386593", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343945, "uuid": "8ccc9d35-3717-492e-9053-1877f111f34a", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343945, "uuid": "dbeca308-dba6-4485-a26c-8f78b774b0e5", "value": "49152:QrYR+HqdZzWgJVxscOqfRZf92pUtvC0ArckDbi0CP2:QrYwKHhVxscBMYf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745343945, "uuid": "a1b8ba76-978c-461a-b8c7-2d7ba8070551", "value": 2094592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745343945, "uuid": "61d713a9-229e-442e-8648-186926dc3500", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12b3bb80-1fa2-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1745344140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745344140, "uuid": "27e6d5f1-7e61-4d82-8411-df1fc0929b80", "comment": "Malware payload (Amadey)", "value": "cb88408b7f022a4d4b4ea18573b1fcb3", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745344140, "uuid": "3c892bb8-e091-46ab-a7cb-8bdac319df3d", "comment": "Malware payload (Amadey)", "value": "cf9c8be50c64e623f511e306a0a995587a4952a010871f9f52309e48e8d91274", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745344140, "uuid": "fdba39fa-25d2-4fb0-ac4d-9a7d296df26f", "value": "T106A5331AF5FC0121F4B87B7126B909DB0633BE43673AC626638E9B7C8C672A495313", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745344140, "uuid": "1299dfde-8109-497e-b106-a59ad9a86f83", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745344140, "uuid": "f04fa32b-3b29-413d-add7-8396c8bbedda", "value": "49152:i8IWqFkz/6ctcCJrNjXBRJqJuJYVieOxnoXbCVXeb:Cjkz/6ciCJ5DJzYViL5sbCV+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745344140, "uuid": "a06d722b-54ea-4d35-a350-4d143dee95cf", "value": 2209792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745344140, "uuid": "610a7b48-be1f-4991-887e-f8d695c16a19", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08ab5c72-1fa2-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745345346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745345346, "uuid": "d6d248fe-f45f-4b2b-bf77-5b4f554f372d", "comment": "Malware payload", "value": "34a203cde1a069372bebf241bedc33f0", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745345346, "uuid": "59166df6-c651-4b4a-915a-b8bea958ccc1", "comment": "Malware payload", "value": "13983d21738aa2db359344c7d909825e2b15a378fbc94d77f565a304f17abf0b", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745345346, "uuid": "46b35e1c-34bc-4361-9423-d84d6748c0e3", "value": "T19F9533C402B51A3ADA981172C4BB4006FF1ECC9E97B0C9B5565A4D2B927F1CD6BF78", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745345346, "uuid": "c4278fad-6cc5-4888-aeab-2d368a586276", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745345346, "uuid": "bf6e75ae-0f4c-4eb0-a710-c111c1f7798a", "value": "49152:kPd161Qu4BfOpWSQNLIGn6WKTQGuy4UZe51AcL+:kPdaTKQQhn6/huy4RDq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745345346, "uuid": "105adaa5-8981-44a2-b882-257ea27ab965", "value": 1902080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745345346, "uuid": "247e52b5-6f2f-4fa8-9a65-cfc0f9ea8ab1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a4f07d8-1fa5-11f0-82df-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1745345495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745345495, "uuid": "5c4ae7a2-ec8d-4c87-ad95-34e9f58dec75", "comment": "Malware payload (Healer)", "value": "8e4db2ce3e2be364921ad258582aa85f", "object_relation": "md5", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745345495, "uuid": "29bcb987-a795-4945-ad9f-9fae2dbf00ce", "comment": "Malware payload (Healer)", "value": "f101b1ad0fda51aeabe897ede44692bf08b7d25812d05ee3658f3f033dc5b436", "object_relation": "sha256", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745345495, "uuid": "7950acb4-b088-48c3-8744-444de0edd990", "value": "T1368533435CD28DEEC26DF831CE4EBB3917EE566442E741B6E547132949009ACB2B3B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745345495, "uuid": "7da8b3cc-343f-441f-841a-bb76cd45fb22", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745345495, "uuid": "3fb427c0-6a5e-4d75-a4f8-6ee36886078a", "value": "24576:A+4rDvjRXrwLWJNGcZeBHbBeh2E6gGy/6eLRSjKnCZsRZt4INs3/ybM2rs1wG7yz:ADr1rC8kJI2E66bSj27vviweYm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745345495, "uuid": "385c4550-af39-4cd7-9dbf-6ac0349dc822", "value": 1720320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745345495, "uuid": "8ecb13ca-4c29-43f7-9f47-5f81a13adc1a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfd0fece-1eda-11f0-82df-82aee05be84a", "comment": "Malware payload (Emmenhtal)", "timestamp": 1745347091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347091, "uuid": "f818cdca-1e2a-4413-a1f2-8a4a8025f403", "comment": "Malware payload (Emmenhtal)", "value": "a77466dbe5c78ae003ddfc65bffca866", "object_relation": "md5", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347091, "uuid": "46c5b57f-b89f-40c1-9a01-3b6140a6a9cc", "comment": "Malware payload (Emmenhtal)", "value": "795b8c369ada96e2b3a37e396a717f2e093524f89eabe1fc9631bb0cd7b5a33b", "object_relation": "sha256", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347091, "uuid": "752d170a-e7d8-4bad-a092-51dc6aced043", "value": "T14125FB11B7F94055F8B3BA751EB9DAE8AA3BF8595F3181DF0348110E0763AA189307", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347091, "uuid": "e059c55b-6a35-4351-abc7-54fb47a73638", "value": "df600280bfaa63bf70c653bfb634058e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347091, "uuid": "38173cad-be72-44a0-bb01-539bbac4b78c", "value": "24576:BdBs/qkBdBs/qkidBs/qkEdBs/qkIdBs/qk:LBOLBOkBOSBOeBO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347091, "uuid": "d8fc59c6-d40a-4ab0-a9d5-271bf750ce29", "value": 1023701, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347091, "uuid": "eacd325c-72c0-4509-ad78-f63c401326aa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfd26cce-1eda-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745347151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347151, "uuid": "f244c876-8e7f-45ef-a3d7-f08b758a6ca8", "comment": "Malware payload", "value": "9a83c133ee396c4b27b0819bfa0d424b", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347151, "uuid": "fd276906-b07d-467d-998a-ea441b54e2d5", "comment": "Malware payload", "value": "def9bcb57a5d00b37b67d4207db26088fb431fd4634cba90db824fddac6e23a5", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347151, "uuid": "3f795594-5fad-41ae-9fb4-973e0149e745", "value": "T1F3054E086EED0325F3B78E7258766721C47BB81ADD524F1D009145C81866720F875F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347151, "uuid": "e348780d-e240-4fc7-88d8-635ed333b06d", "value": "24:8AyfJ/ByUx+fg0aK/qdd79dsoEZ/7QAMN5:8j1dJ9ha7Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347151, "uuid": "6b963eda-20ff-4308-9c24-4318c498a7a5", "value": 826776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347151, "uuid": "ad110872-caa9-466b-b5d2-13c7bad6162d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ea0263-1a77-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1745347208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347208, "uuid": "b3d85564-0330-4710-8da7-88e2aba3829a", "comment": "Malware payload", "value": "567d3249dbe60fa9478a424a69c2c535", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347208, "uuid": "8f39fc23-33a9-4bf1-81f1-2b222f208edc", "comment": "Malware payload", "value": "ff70c53dd6e9806c588d8f78ee35d406db0879bf5419a18a87c7982c79e3e9bb", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347208, "uuid": "b44bd223-f0f4-4b11-903d-40fe0b8d2688", "value": "T19F05E184F5E01E67E487813F9B8246720266ED5FB34AC317574876BBB4BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347208, "uuid": "33310713-76ae-47ea-b4c2-4840625cbc96", "value": "12288:BZpdDbfRWxSYOkwVcqcMFT5G1z6EtYOyDIGOnd7w4bLvVc:BHlb/KwiqcMFUzYP8GU7PvVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347208, "uuid": "539f27ca-2741-4625-89fa-61ebf80391fe", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347208, "uuid": "7475072e-82c8-44d4-a740-52b9e97ef518", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347208, "uuid": "8ae2216e-4efd-4b38-9d5c-27536a3258b0", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1745347208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347208, "uuid": "cd75f426-ea2d-40b9-b719-9c43ac24bd58", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347208, "uuid": "b987b459-c51a-4959-bdea-ec8e4fb90c4b", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347208, "uuid": "403828db-827b-498f-84bc-6e86f254dc04", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347208, "uuid": "a5208df9-4dcc-4b53-b6a3-4745e5385440", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347208, "uuid": "90256ea7-bb74-40bc-b719-26c8f9f97be6", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347208, "uuid": "2cb4fd2b-005c-4a9a-aee8-595beaf2f121", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347208, "uuid": "42631462-9758-4484-8c33-f966ce73e4f5", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1745347209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347209, "uuid": "8d6f7b48-0101-4e3c-93c2-7213e624f54e", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347209, "uuid": "8ae466f0-e36a-4d0b-b193-9eac283b063d", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347209, "uuid": "c1cc965f-93c5-4d83-ad9d-5cd291d7dbb6", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347209, "uuid": "88beb2eb-8408-4ae4-b31c-d631fe49583e", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347209, "uuid": "23973bf6-eb13-4eff-aab8-60405f61ab6f", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cae4e4b-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1745347209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347209, "uuid": "b95e7187-5939-45c8-bfbc-25deb7072108", "comment": "Malware payload", "value": "936b35bfee8232f437bf6b46e88401dd", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347209, "uuid": "5ae16885-0c04-4352-b6bc-b0101809f2ca", "comment": "Malware payload", "value": "de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347209, "uuid": "9177428c-402a-4a23-94cb-ca10eecd126b", "value": "T1B9356D56F9808EA2C5D8177BF75D835833134B78D7DEB102CD08672877AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347209, "uuid": "5f1596de-5925-4f7a-9f0e-16284d93d6e8", "value": "12288:E8dASOYRNCAJump208iJftl7zmnSrlcaUxQ5TVFQGl9eLtRajZa6ZTxIVD7bLv:E8dbbsO38+TfgRinIVvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347209, "uuid": "88823357-afcb-4893-a096-ab9666213f14", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347209, "uuid": "712ee119-5cc2-48ef-9b26-e6e32a85160c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347209, "uuid": "c45f8f24-0ab1-4b4d-9895-b612ac7f2b5c", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fa7ce9e-0807-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1745347210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347210, "uuid": "ae724513-6059-4e52-bd1f-94c23aca3512", "comment": "Malware payload", "value": "df64a5c787f34c5b38c8103a67e3d97c", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347210, "uuid": "f6ff6a4b-00d2-41ba-b975-9d28dab99687", "comment": "Malware payload", "value": "6f1bbcaa6efc41ee257919a85acc9ea5b1f82c8def103e39629e0b5161800ccc", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347210, "uuid": "82bd1fc5-6c11-44d0-a25f-e8f1282f9e6f", "value": "T11D356D56F9808EA2C5D8177BB75DC35833234B78D7DEB102CD08672477AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347210, "uuid": "348343a0-83b3-4453-a212-7a1fc06627b9", "value": "12288:sQFoCapOujNJ7h8SYIhU1wwy7zh36bV7CIBolbVtE7ZdXjboyjBNY3v9fQbLv:sQFbJi5Pa/CbmzotVqv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347210, "uuid": "ea56d419-da61-468a-a680-6d439c81b913", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347210, "uuid": "15104822-cfb3-44be-9e2c-50783f13901e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347210, "uuid": "cafc00ac-fd93-4246-9dc6-febea9eb83fa", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5afee75-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload (Braodo)", "timestamp": 1745347447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347447, "uuid": "10d44694-dae1-470c-981f-6ad8d395c70d", "comment": "Malware payload (Braodo)", "value": "4a45714cfe3b57fce51b377615ec3403", "object_relation": "md5", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347447, "uuid": "f285e102-7a73-44bb-a2fc-11f123a57eda", "comment": "Malware payload (Braodo)", "value": "37d2567628997276a91a36d73c56319b2d76d49174b49c374f06e61729e22175", "object_relation": "sha256", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347447, "uuid": "f120b9e9-37f1-4a35-92e1-145498b7e894", "value": "T17BB4121098D71C48DEF5C4EBB56CC54DCAB2C5C47188F742F3AA6EA9A9201BB5F0CC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347447, "uuid": "e219d6aa-8ec0-4224-86f6-aae555af7a19", "value": "48:UuAuAuAuAuAuAuAuAuAuAuAuAuAuAuAuAuAuAuAuAuAuAuAuAuAuAuAuAuAuAuAO:X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347447, "uuid": "cdde4a65-d275-40d1-9ee2-10ec2925acce", "value": 524314, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347447, "uuid": "3cd6af0b-93ff-4823-8067-49c1cee65405", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0cf67792-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347567, "uuid": "1d3027a5-d1fa-4bff-b59f-6e73feee503e", "comment": "Malware payload (Mirai)", "value": "0406e51e73066c73edf18d4202f38f15", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347567, "uuid": "9a984b18-be2a-4cfc-b9fc-f7a614270ba4", "comment": "Malware payload (Mirai)", "value": "9ce57e9ab90a3c2b077348dd8efb8e27f37c1c78f83cce9e0de142ac2cbd26f9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347567, "uuid": "a4e7c87e-5afb-484b-b0ed-b531a426cb06", "value": "T154731A45B8818A16C5D813FBFD2E018D332667F8E2DF7212DD105F647BCA92B0E67A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347567, "uuid": "ffa3bda9-afc3-469f-accb-d9db97182227", "value": "1536:eNn8UxkW50thqBtIC1R4/LsdH0ZBYSSZvNNSVzfpnDM4ioyuuz6od42+:wxkW0hCtIUOSqzgjMbyuuz6w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347567, "uuid": "136db04d-e2e8-4c36-b875-f6cb780c69ca", "value": 75056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347567, "uuid": "e1821732-4627-4e58-8d7c-b268fe0ab3a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d25baf0-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347567, "uuid": "2efeb0b3-5b30-42a6-a814-4d03acb955b3", "comment": "Malware payload (Mirai)", "value": "45a85b3359674f0d4b45811766aa3332", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347567, "uuid": "336453e5-a481-4584-b515-f64aa93be8a0", "comment": "Malware payload (Mirai)", "value": "6b0a3e1c8fd56c4c6262f03f668cb62e19da3cc3d1154c269402cb7b51566742", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347567, "uuid": "7c954bc9-4bd7-44ef-8629-d8e68a2d56ce", "value": "T1DA43D652B8815A6BC1E423BBEA6E518D3371B3F8D1DF3616CC111B24778952F0EA7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347567, "uuid": "7b6c50ae-73f9-43bc-9ced-a6f60a2c9394", "value": "1536:Jk48ZOlDxbcYfiQ125+XDW+rd8ea0ClG9WkQxld42+:x8ZKut4DW+iea0OG9/Qd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347567, "uuid": "867964f6-c37b-4f97-9f62-55e174b9973f", "value": 55612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347567, "uuid": "6eacf2de-527e-4aa1-b5f9-8a9cb7b8509d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d2c5c3c-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347567, "uuid": "33a8a374-e896-4795-aa7b-ca6802518196", "comment": "Malware payload (Mirai)", "value": "b343a870fe9ce47f17944dd379cd7074", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347567, "uuid": "dc0ce64f-757a-439b-b7f8-f39b495cc625", "comment": "Malware payload (Mirai)", "value": "4abfbbfae14f2df6c4257d31458958fc144d9579eac2745dd2617662c806b358", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347567, "uuid": "e82ff7f1-9342-452d-a44e-0c9e28a194ab", "value": "T160438E36C47FADA8C5858638A42149741F63F50882A7AFFA9BC587645047FFCF6083", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347567, "uuid": "d6336542-cf6e-4bfd-86be-37d0c100fac6", "value": "1536:rHdIcHE2ZwtdW4KWjUKbq9V9R3qLw2h5Cwjd42+:rHFHE2Znnz9ZqLw2h5L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347567, "uuid": "12158400-8e1c-4fc0-b2c3-f45cf287ccb5", "value": 55212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347567, "uuid": "2c80dc68-7072-4198-b155-b16e8e879115", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d49945c-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347567, "uuid": "9f8615f8-b7ac-4745-a00a-2e0bb1fd5e04", "comment": "Malware payload (Mirai)", "value": "70d4cd6e13d913a09bf70a3836b62d08", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347567, "uuid": "d601dcca-27c9-4600-a297-908cb1f86cbe", "comment": "Malware payload (Mirai)", "value": "352a3a5a434564b4ce085e30b8be27c7e3363a2c75d7286abae564574d60a03f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347567, "uuid": "4441d0c5-28f4-4f5a-a913-c18a77880ff9", "value": "T155D34B46FA418A13C4D513BABAAF41493332D7A4D3DB730699185FB43FC67AE0E636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347567, "uuid": "c3ffc577-b614-4ceb-b098-092630c95618", "value": "3072:5KacBqVuJVkW1cIOPZoxNOqMP0wctzHnyPF+84/M/92L18Yj:kacBQuJVkW1cIOaxNOqMPVoUF+8MM/9S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347567, "uuid": "f77e7c41-84f0-45f6-8b13-b804e4acc533", "value": 136482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347567, "uuid": "a9578314-400b-48f3-8a8b-cb7dc8a9302a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30b50495-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "a873c93c-2d77-4108-8dfb-3f1dd2d2722c", "comment": "Malware payload (Mirai)", "value": "3dc6030a2acb7de6f4133f233bead1b7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "4f8a6a93-d75c-4efb-a33e-811390c9522c", "comment": "Malware payload (Mirai)", "value": "a2804652f97fcac34dd2325231be5c21ae67f08d7e3588d25c35edc8a7cada43", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "c9567db0-64b6-4b95-84cc-2f46486364be", "value": "T18B533CD6A401AD3CFC6BE6BA40561A19FE213B3015A30F2B9797FC93AC321B79D16D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "04c8acc0-f8f9-4235-bc97-e6e4d4f16275", "value": "768:reT+6JhUvtNaEVG7mV2x9+cOG9yN1ul8yXLyCYlqXxZv2XWFPJ:rInQvtNFG7GeAbNUl8yXxGqPvyGJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347627, "uuid": "29d13e3a-d772-4450-96b1-5b9b01ca4978", "value": 61432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "fbab851f-3b0e-4cd5-a2d2-bb9aeebe926a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30cd9bb9-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "e8420deb-e644-4712-a976-1d54c6093481", "comment": "Malware payload (Mirai)", "value": "de0f918a5eadb83b64a5e141710742f9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "ff1e366c-891b-4578-91c4-62522d613b64", "comment": "Malware payload (Mirai)", "value": "f19a39966cef8d46c1ef8ae459a8b4524ba112ab0a73b84e0c675db239087923", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "64f19e38-75bd-4764-a9a6-05c961d81075", "value": "T168535921797A2F17C4E8A07A25B38315B6B5768E32B8C65D3C732F4EFF14640A0075", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "07474df4-4171-4c2e-a572-f419b6eb1283", "value": "1536:k+YY8/acYmgBOwicSYmnWLI1fz/A0Lzp7pdYm+K:n2DZYmnFxoYpXr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347627, "uuid": "289525fe-34c9-4111-8742-f9fb6c4bb40e", "value": 64400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "2d05ffd1-e5f0-4c04-9bc9-421add6786a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30da98f9-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "9a7870a1-1a9e-4908-ae38-43461ccd757f", "comment": "Malware payload (Mirai)", "value": "5807f5872057957f2c87427a06302b4e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "35d15af4-8678-475b-b58d-72cbf99758e5", "comment": "Malware payload (Mirai)", "value": "d6671c3fe4d4e7265ca031dbf5f90a920c5c36e0eba804cb9bc568061db87295", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "58da1dfc-09bc-415c-9b6c-6761ea71a103", "value": "T1A93318C4E903DDFDDC5619712137EB328772F13B1029EA87E7ACAA22AC46B41D4472", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "18c51129-05d4-4e9e-87ae-2e58c402cf63", "value": "1536:O13kynNjv6czSEZeLmI37KNCgoTCpoQzWxS2RAfah5iQ:AUyntv6cuEZ437KAgoWpoeiSi1D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347627, "uuid": "b6901160-8f0d-4c5b-b198-fd50747d1dbd", "value": 54864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "a4b1e915-cd22-4302-ad46-0223ec18d4d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30daf8c0-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "726f4a5e-8556-4849-865c-f84d21dcd0e4", "comment": "Malware payload (Mirai)", "value": "81f87a5f19f3312c551b69d0f5c42100", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "6162de3a-9bd4-484a-b4bc-97d14791731a", "comment": "Malware payload (Mirai)", "value": "e82e75cdf3d07ea85e594f55b3e52641c31f511ce9e8d454dad4b6ece1a40310", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "7099c78e-eddd-46a8-81f2-e4ab1c87c59f", "value": "T17E33F1B642AB9D71C17052F7152D649E60162378E3E5F10356654470EACB2F28AFE7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "fe7813d5-b828-4f62-a1ab-f84a96d4de99", "value": "1536:ICoqsGR4eB3g0Vmh1IxIpC8JdL9VE8amFZP7R3A:loqs2Twh6P8JdLJ9ZP7R3A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347627, "uuid": "4a3a9149-a56b-4b53-9583-6889b74bcce6", "value": 51444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "fedcbe97-33e8-4553-9b9d-296b229a26fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30e20c01-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "0cf75182-7866-4381-a205-29042b48fff0", "comment": "Malware payload (Mirai)", "value": "d80be986696539aa0d5f244a74639d07", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "baabae78-1d91-4e5d-b14f-577b0e459a55", "comment": "Malware payload (Mirai)", "value": "9785b6a279e9a93a007a78e7f8fb3e9bc949292af830931f7ef1575d3fc58b9b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "05bc9f39-f396-44ee-83c2-f351425d49e9", "value": "T1C573A9092E358F6CFB5D823697B78F219758339626E1C645E16CFE021E7024D341FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "558be9e7-29e4-46a4-ba91-d509c46d74fd", "value": "1536:lo89L2T27mQaXcn6EyvXqaQSiIHW5VU+6Y3jfhdR2QEc8LMkMd42+T7w:lo+2TIaXIE6aZiIH0VU+6KfhdR2Hc8Li", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347627, "uuid": "20ed8aad-2d84-469b-9616-e6c076486723", "value": 80188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "a312e204-7251-47f6-87ba-1d045e06ad20", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30e7cf24-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "2a6b1cf4-4451-45bd-b38a-e01654915c8f", "comment": "Malware payload (Mirai)", "value": "afce25986f2bb950617e605f20a12edb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "24edfe2a-f883-44b0-9f2a-ffaeb5293d97", "comment": "Malware payload (Mirai)", "value": "bca9d0884f1c4c7a80ec5bef2c5d7f676d1b34ecce1a2a0f7d5b0bc265fc210c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "1eda93d8-5193-4a5d-9f2d-0bea64f44a12", "value": "T1A8E2F111691A847AE730C471E0F6818377691BBDBAFEB1F65462060DDC82A4293F1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "242c1ed3-9048-433b-a9c4-2b1bfa17bc67", "value": "768:TEKkUgXAnURCr6HmDFStmYt6fq9q3UELdQ:/kEn7uHEemtffLe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347627, "uuid": "09f0da4a-633a-498e-8b70-8e0da8471832", "value": 31872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "3e16130d-11cf-47a1-9403-d7702a39923c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30ea173b-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "19731b49-3a44-405c-8b87-9d9ef1ed9b16", "comment": "Malware payload (Mirai)", "value": "7e381a2d6c8025272a44d665ee20f96e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "fb79e135-e6a5-435b-9798-73762983d498", "comment": "Malware payload (Mirai)", "value": "384d88db6ae362b974ea8181f0299b67d2106ad8efbd7be4788973b9e81163ef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "39dd49a6-8f75-4ee2-9c01-f51196a482ca", "value": "T1D4433B03322C0E17D9A21EB0353F06E093BFF95126E1B68A254FDB664639E7615C2F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "bd990f33-0c0f-4a22-84ef-0e72049d8348", "value": "1536:1t1JILhthQ+1r4atGKmifAKWNGa7d42+8/:1ufh/w4AK+GmP/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347627, "uuid": "eb6b9546-e28e-468f-8319-33620984d9a7", "value": 60040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "356e8e57-545c-40e5-b0c1-c374a19b2c74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30ef7f24-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "19b97c2b-afd4-44b2-a2e8-7eb01f0334b6", "comment": "Malware payload (Mirai)", "value": "c061282d3741a6a5e800a3a56ec52df6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "97a801cd-5f48-42bb-b870-e45b7f50ba31", "comment": "Malware payload (Mirai)", "value": "8e54b6c6ceacfa83a5e9737cfd310d7dd2bc586aafbe450f49f4e11657d6b100", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "9ae65985-1612-4308-bcbe-f6ef6ad0fed2", "value": "T134732A26B97A1E26C0D4B57E60FB8B11F6E1278E26B4C50A7D720E5EEF147006502E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "549a6476-ed18-414f-9a24-339acbd5f067", "value": "1536:hD/B6f6UD5hAS7mo0DCCAXpSKV6v3G78nN9WA:927jqCt8v3GI/f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347627, "uuid": "18be6e87-11f4-4b1d-85f3-de615d3d190f", "value": 74752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "71122149-8d0c-43fc-ab91-7fdea33a5933", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31033b85-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "ca5278fb-c198-40eb-9481-1e325bfa5c72", "comment": "Malware payload (Mirai)", "value": "2950290fb4286ed893d47891b225287c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "40b8bd7b-7f86-42b7-9da7-d3b19b9dffa3", "comment": "Malware payload (Mirai)", "value": "3535a02358d255779ee54ec6b86752bd497155b61b9e51634deceb7ce7fe185c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "4f8114cc-df68-40b5-a24c-1970c590505c", "value": "T13D53E58178919A17C5E422BBFA6E018D373563F8D1DF3216CD226F2476C982F0DA7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "6ac47b17-a525-4347-96d9-a036f2443582", "value": "1536:gP1IwP44TCRfNdbYakabDrzKQlG9Wcq8JJTKd42+:gP7V4sazKUG9bqAJT+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347627, "uuid": "1ab03404-d1e5-43bc-b391-850d789b5202", "value": 64460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347627, "uuid": "8f36e77d-dc89-45d8-9846-e6ff6d536c08", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31500445-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347628, "uuid": "96dc74a7-d8da-4b59-917e-712c30438153", "comment": "Malware payload (Mirai)", "value": "45c3fa7985b92da37e40c4b62712d1bd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347628, "uuid": "95323148-0764-4a92-931c-5d43932de7d9", "comment": "Malware payload (Mirai)", "value": "3134f9eb0bfc19624fe0729113c5822e74c40be69db99aa0e6cc06899de25130", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347628, "uuid": "c5c122e8-de63-4456-ae4f-11f7cf93de69", "value": "T152D2D06DE57482D5FD8D5C3E808C3FA05E19E581231BDB9267228C8D5B32C57F27A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347628, "uuid": "350db1af-4b39-45f2-95d6-ea77db58b367", "value": "384:t8pVWtmRsLYEpB6V8S628FuRUuNJG9whQ3Cfbo6w+K95orjYxzRWGVCz0Nvkp:KMYHb62x4ahQ3CfdwLj9XWh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347628, "uuid": "ac1ac19d-e738-4f0f-95c5-7e9941491880", "value": 29944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347628, "uuid": "5b76b0b8-d2a8-4c82-87cd-3f2209de88bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "315de0d4-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347628, "uuid": "77238d12-7409-4c16-a9f5-8ab3a9113c00", "comment": "Malware payload (Mirai)", "value": "aebcd2119026741bcee87ceeff0e334e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347628, "uuid": "4ec55e3d-f9a4-43fb-927b-23929eaf179a", "comment": "Malware payload (Mirai)", "value": "3da5a6118a8e0f2f6be05132b0b740f8e0699c17a801e55d2ec68381f58737e8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347628, "uuid": "88e01170-413f-48a8-b872-2135372232e0", "value": "T11B534B99B4028E3DF88FE97984160E05BA2023D112931F276BAFFDE37D331659D16E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347628, "uuid": "d586f56f-e448-4622-9489-6102ff5b1b8f", "value": "768:2eY49YE204qEkRf/36fmODeiuQlJZvTgFHq1euk8B8vpG97ErlfXySJ1oXTo7PJ:2Y7EkRfPh3iDx8Fq1Xk8B2aErlfiSJFl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347628, "uuid": "38d413ba-13fe-4a61-aa69-a64d4bd90f70", "value": 65096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347628, "uuid": "c6cb6363-9e32-437d-a18e-e15b3f79a504", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31a488b0-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347628, "uuid": "1a0b4570-1d8c-4c40-a2de-ca879f0a50e4", "comment": "Malware payload (Mirai)", "value": "d35a82f53aad4d8541312ada072fd00d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347628, "uuid": "4964f85d-f011-4af8-b0f6-1a1f10ade4cf", "comment": "Malware payload (Mirai)", "value": "05fdae7d346eb5d1ada166d7cc72dc4edb7f81174d085ed824ffaf457aa29b88", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347628, "uuid": "d0cd83a7-6e33-442b-8c30-666a86550a10", "value": "T136538D75D12DEEA8C0424AB4A9598E704F13A0C046733EF7DA9587A69443DBCF858F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347628, "uuid": "757f3855-989b-4c06-a50a-23418fcde700", "value": "1536:zag/Vdf5F1LwtkbaOoQ3veifs3guba/qzCEZaCw:zJzf5TLcQfPf+gehCEZa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347628, "uuid": "1b4e900f-94f0-42f0-bde5-a101a8ba9d37", "value": 63484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347628, "uuid": "516a53b3-47ef-4b3b-ab92-cf035dcb18dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31ec24e7-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347629, "uuid": "0c3dc6be-2ab3-4579-8132-5d3fdbbf6d08", "comment": "Malware payload (Mirai)", "value": "091b2b7f63a1a4e57e56b25afcdda322", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347629, "uuid": "d568844d-d544-4456-9dde-cde194d5c5a3", "comment": "Malware payload (Mirai)", "value": "7772fd54a07f4aeea3936e5284e33ee6e12ecf4af37555edac476738f182d28c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347629, "uuid": "d8da4af4-d6c1-4f62-b3b6-944141076219", "value": "T1A7839316BF601FF7EC9ACC338AA91705289D611E31A93B75B830D428F25B25F15E39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347629, "uuid": "5c264e56-9b51-4f5a-850a-07adf23b1b6d", "value": "1536:bw4pjQLOQ2GTZHslkJGAopJpPok9Z5ztyMd42+B:bw4pjWQAFslok9R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347629, "uuid": "e026cc87-5b7f-4491-a5f8-ad9747da5902", "value": 84172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347629, "uuid": "d92ed75d-cfd9-401e-9dce-63a802e79196", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53486cee-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347685, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347685, "uuid": "110a3e66-9072-4931-989c-0c28a8cf7f3b", "comment": "Malware payload (Mirai)", "value": "1506b411b5e7e63bd18feef148e2cac9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347685, "uuid": "57b1886e-2c79-4677-b9b9-6c3111e8a157", "comment": "Malware payload (Mirai)", "value": "bd0c9418c4f5cf290f489f61f0fe534d6b39e751eb0932e5175ca3d50f2fdb3e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347685, "uuid": "ff0e3c88-85ff-46d7-864e-0feaa6e8271d", "value": "T1AEC2E1A1E1F62E99F73A7E502AA5C2C17BB04E5EB777CC92255CAF0504A321B4B057", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347685, "uuid": "4c762267-33a4-4be4-b74d-d4443e918929", "value": "768:yG959yM0HWubJsWDYcG3m4uVcqgw09S0O:4M0HRJswYcG3m4u+qgw09S0O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347685, "uuid": "1889eb3c-9497-447a-bc83-32852c4762e2", "value": 26232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347685, "uuid": "973e013a-5771-49be-b61a-b8a6e2e3c506", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5359c307-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347685, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347685, "uuid": "89cd35e0-80f1-44ea-92fb-0f299e520ee2", "comment": "Malware payload (Mirai)", "value": "8f5a480022dfdb2270e146b1b983c69a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347685, "uuid": "03aa3ff2-05cb-4bfb-9f1f-0737ceaf6843", "comment": "Malware payload (Mirai)", "value": "1f27b71818b1627d0ffe2f695a47b756b2aa2036ca77765a19712d154df80624", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347685, "uuid": "e2528e35-ca36-4e8e-9aa1-f87cf5b426ba", "value": "T11BB2E162A1463E62C770313AA97CCA01576B57F8F0AB73753124B7AC4BD2C4B50781", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347685, "uuid": "e516de10-772a-4a50-820d-eabdc591d1f1", "value": "384:vZUX11S49enZh57fYONQ/yQVQbFxD+ckPvDxqSwPzMvdMP1nhymdGUop5hK5:yX1De9kONQG5xD+jHMDzuMZs3UozY5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347685, "uuid": "9cce9b84-5c52-46ea-992e-8279a8cdc322", "value": 23732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347685, "uuid": "f9c939fb-8d94-406b-ade1-f4488281e014", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5371a778-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347685, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347685, "uuid": "a0d42d9e-8ab1-4062-99b3-2ce1b7eddd18", "comment": "Malware payload (Mirai)", "value": "5bd7c3ff67ac2076c79cb4c5962d3a7a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347685, "uuid": "4fbb82d9-514f-4882-8d43-451a6aadf6d1", "comment": "Malware payload (Mirai)", "value": "46aa58def29371572b49154fc7a9983f533d822e8e3f85700aed6e01a3cf557c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347685, "uuid": "218a41bb-8012-48e9-bcab-c85bf50e8003", "value": "T185D2E1BC7B0249D7CAAEA1788DE50B262D608FE3F1436C07A554D9D7BB058AC2CB5D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347685, "uuid": "2ea3ea70-f436-4eb0-b9a2-8208b454f335", "value": "768:z4ylAtv6pqLJM0RXaxGyUbXtheU/SsFL9+JgGlzDpbuR1J/:cMBqTRXa+Zhr/9FgVJu5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347685, "uuid": "79aba523-9306-449a-a9ed-9e19af2e1632", "value": 28884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347685, "uuid": "31450175-144f-4b79-b832-5ab7688d360d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68cdd4b5-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1745347721, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347721, "uuid": "432fbd86-7b2e-4205-85a0-8c498b5feaf0", "comment": "Malware payload (Healer)", "value": "8b1de5a9bc84e97a80b9f3a78d82e865", "object_relation": "md5", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347721, "uuid": "2488eae4-06e8-465b-bf5f-4172f3e15e5b", "comment": "Malware payload (Healer)", "value": "1e025c492b68d03b47b620c99d3ad1e0ec6a55574efdb7a98fb3b1510809f97f", "object_relation": "sha256", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347721, "uuid": "676c89e4-c8c2-4842-8910-81911296b3af", "value": "T1E88533BBBAE33210F9DC42BDA1BD5AB73746C41701E1793FC1197A71829300AAE19D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347721, "uuid": "6895fc64-d054-4303-bbd1-821847735c5c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347721, "uuid": "aefceb04-e677-4111-ba59-144b5356adad", "value": "49152:yjQeP7L4VYRV4dtEsIJz/JzQYIqHmes5jjBZNBcINH:yNPmaV4zEsgFVjHmVZvlNH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347721, "uuid": "cce27e12-5ba2-418a-b84b-c376b203997f", "value": 1732096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347721, "uuid": "ef58ecdb-b15e-497f-9ece-3b324f3fa7e8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7707094b-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745347745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347745, "uuid": "80678ec3-1e7e-491d-b5f7-b3cc18ca5df4", "comment": "Malware payload (Mirai)", "value": "9c7c512d64a1999a8c60275678701d18", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347745, "uuid": "86a39bf0-efbe-4497-b78e-f4297e95279e", "comment": "Malware payload (Mirai)", "value": "c1250a07ba111e1d0622197259edf22c2283d0fa2f8c70fea60b1c9c20266125", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347745, "uuid": "aaa33543-4035-4965-ac7c-ab932418cc19", "value": "T1BFC2E0A55228D472F1B48436FDBF05035736CEF8DAEF362622144734E096D2796B4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347745, "uuid": "238f249a-0c99-4635-8f65-b2a57d0429fb", "value": "384:XH2HEdV7UQDoYQHXxcjllK5+AWaFmK0MF9lz7X6AGexXVzonBY6plNHJXhymdGUZ:myNUQUfhQllxlaH0MFjlOnGs5Fs3UozC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347745, "uuid": "46aa577d-0a5b-4b84-847e-c44df8129549", "value": 27352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347745, "uuid": "30cd6c26-40a6-4c39-97f3-500b9ee47641", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4832324-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745347901, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347901, "uuid": "ce3cfd87-7961-4f31-ac99-633505babeb1", "comment": "Malware payload (Gafgyt)", "value": "08fda06678477bf02b6dfda6d50a13d0", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347901, "uuid": "42be747b-b842-422c-be42-8e31e2002e61", "comment": "Malware payload (Gafgyt)", "value": "dfb21e42bf851320b801818613417b1104da56c5c560a24ae896d894195db640", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347901, "uuid": "1e35f40c-8de8-4646-b886-d87ebf630a52", "value": "T1C4244C24E5404B53C2E323B9AA8E428E3B3347E573D773154A389BB43FC2B9A1D759", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347901, "uuid": "699e4a63-f090-4cc7-a857-fcfad60ee44e", "value": "6144:NtpKaECwXhQIFzkLQ5ha26nWgV7Pi2m0wfB5RyAn:NtpKaECwXhQkX5haMiu2m0mB5RyAn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347901, "uuid": "94e62b40-7fab-4dc5-9f4d-cc0d2fadc1cc", "value": 209630, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347901, "uuid": "3072bed1-f4e9-472b-bf48-76c20bdb95c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9607c64-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745347936, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347936, "uuid": "58c8afe4-4fe8-455e-b052-53971272ff70", "comment": "Malware payload (Gafgyt)", "value": "6348694aa127b37608427f0fa371b107", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347936, "uuid": "389fc57a-cab6-4821-a448-8f75ece7603c", "comment": "Malware payload (Gafgyt)", "value": "d871e2aa4c6d14234b9e4494bd9ac6adb85201447cdf9fa783e73bca5b46d2be", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347936, "uuid": "fee2db52-f095-4769-969d-45d2e06000b4", "value": "T108D319F6F290C172D14316B111A6DF360C32E6F7279E6507E3A81DB0EE3A18235A9E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347936, "uuid": "c41ba8c2-b4e0-4291-9d9d-ec2d9aa21e7e", "value": "3072:jSO1SULUeU/UrUIyUP+g5rqqIBPx9+Ig/5h+EyJWimJswdytNr9:jgIXSMCVg5rABp9+IA5h+EyJ/mJswdyh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347936, "uuid": "646c0870-5670-4c66-81d3-ec9c6881377e", "value": 138662, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347936, "uuid": "dae2b14e-81fc-436f-97b2-c5be7aac28ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efabfc41-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745347947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347947, "uuid": "67877976-9a12-4b81-bfe3-236441c57293", "comment": "Malware payload", "value": "effeebb57b0ec813bb56ba663f1947db", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347947, "uuid": "e0e66887-0d7e-482d-bc0d-1ca60c63d354", "comment": "Malware payload", "value": "142bcc283447c942c26b638fbdd759f2932b9699b0e8a0745cfbd628b204e549", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347947, "uuid": "59f19e50-6fa9-4af7-8a7e-e24a6e3e8a79", "value": "T12053F97766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347947, "uuid": "417077ab-0fc4-4df6-a738-d057bd4e441f", "value": "768:aA1fh41SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/tAsR1X1t1RB1pydul2sm:aA1fh41P6n2ysR1X1t1RB1pydug1l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347947, "uuid": "dc1c1097-bd88-487d-b504-e37c7d1610e6", "value": 64454, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347947, "uuid": "6a94a911-1363-44f1-8cf3-3d74e7a2dc65", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f184420a-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745347950, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347950, "uuid": "2e17efb1-c842-4b54-8c2b-b6f09a50416f", "comment": "Malware payload (Gafgyt)", "value": "c447068bad6b701c2b3b6003e3e5e5dd", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347950, "uuid": "025b2f65-5401-4ea1-a86c-af817a4417e0", "comment": "Malware payload (Gafgyt)", "value": "704a6fbc8a138e12d43fdf95842a26de36c3f158121bb825d305e31b8056c8b8", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347950, "uuid": "4ab36a39-abca-44c7-a246-e0e81079b1de", "value": "T1EE24833E7A12AB7DE2A8837107F6AFB19B5511E323A19341E27CC7185E7124D2C8FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347950, "uuid": "fdd35633-8a1e-4961-851f-7605a2c83e74", "value": "3072:3XC9j6w2ZQgoYJR4GZOhL3qu2a1zleu+WRd9soUQcI7A5hEBk1cmrpy6n9Nn:3SPfTcI7A5hE1mrpy6n9Nn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745347950, "uuid": "dc83390c-fba8-47f8-bf1c-4eac7e9b94a5", "value": 214648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347950, "uuid": "13d5e6e1-7ba6-43bb-a1b7-1f8acfc2916f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19a40d11-1fab-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745348017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348017, "uuid": "49459d12-09f3-4dac-b4f6-41071f22d0e3", "comment": "Malware payload (Gafgyt)", "value": "0868a13def69580c554eba6b7cd810d7", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348017, "uuid": "00e76f3d-e3b9-46d9-8368-71e0eae57e18", "comment": "Malware payload (Gafgyt)", "value": "d97cab28c47900ddee60dec2458e9f845c701a33785386cddf72db20a92a6b53", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348017, "uuid": "019c49cf-83c3-4925-96bf-5ecfbe303d2a", "value": "T1744111CB316609B07DB0AD63B26B644475F2DAD664EEAF09ACDD3CD9408DE49B001F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348017, "uuid": "fdbf7c8b-cd9e-4ca4-baff-ed25105d5f14", "value": "48:1/OKja/Ql/+n/c/A/s/rU/Y/bU/a3/A/E/LA/UyZo4:1/OKja/o/+n/c/A/s/rU/Y/bU/w/A/EK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745348017, "uuid": "572d21cb-1f1b-4961-b68a-2b1e594c6369", "value": 2123, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348017, "uuid": "efc7fa20-408e-4f0b-9ab9-03761cf9577f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b4b0eb2-1fab-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1745348074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348074, "uuid": "a215b165-6021-4c00-ae5c-d089b7c49c58", "comment": "Malware payload (Amadey)", "value": "719f4b1a13b43651984faebb880e3c62", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348074, "uuid": "7b6403ef-dc1d-4c4d-989a-43fc636c12ac", "comment": "Malware payload (Amadey)", "value": "1769a6d1a5b20e2cc5994494738179fb12541f041d1d3cd872b6d962d115e519", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348074, "uuid": "ea5dc88b-5cc9-4acf-bb31-56cb920e0b3c", "value": "T1B2159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348074, "uuid": "4dd7f6f3-8005-4eea-a2d7-7b779fd843f0", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348074, "uuid": "33c892d0-f76f-45b6-9e07-530c5bb76078", "value": "24576:DqDEvCTbMWu7rQYlBQcBiT6rprG8aeFV:DTvC/MTQYxsWR7aeF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745348074, "uuid": "f35b1eda-48cd-484f-b91d-c635037266cc", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348074, "uuid": "e338d86e-5eee-4da2-9be2-cadb6b4ed1bc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7cee19d-1fab-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745348256, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348256, "uuid": "3ceed38c-e7d3-4cad-ad24-cb79ad996d0a", "comment": "Malware payload (CredentialFlusher)", "value": "6173f590216cac5485c3134974c633f5", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348256, "uuid": "f5d56241-0536-4b97-a652-9de643645df2", "comment": "Malware payload (CredentialFlusher)", "value": "f7636fa1bc853258ccc7204df505d7f73d5e81e0da7a86907444f70ee4e3cdf7", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348256, "uuid": "22b0bc5e-2394-4341-a8a4-ac3f8534c12c", "value": "T178259E027391C062FF9B92334F5AF6515BBC69260123E61F13A81D79BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348256, "uuid": "72fdeab1-a221-4b5e-a997-8c6b3a0fdbdc", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348256, "uuid": "a459718d-7508-430f-8bb0-734d5d02c17e", "value": "24576:RqDEvCTbMWu7rQYlBQcBiT6rprG8a2NWuR:RTvC/MTQYxsWR7a2Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745348256, "uuid": "82028381-10b3-4d6c-a898-528b52585343", "value": 968704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348256, "uuid": "6b6f3686-7062-41f4-a7ac-9e264e182291", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "245f31f2-1fac-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745348465, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348465, "uuid": "92874404-7c61-464a-86aa-d6bddc273a53", "comment": "Malware payload", "value": "52e4af6ad000916e96b39a4a5806c79b", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348465, "uuid": "debf7d57-5cd1-43ad-a5ff-ccad6fdf75be", "comment": "Malware payload", "value": "13013536118b69ed79be1cf3c2eaada34e540ca48aa236afbeff49469c0b4e76", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348465, "uuid": "64b5bbe1-91f5-458c-b8b5-371cede53b55", "value": "T1A521A9025BE09F59F2F7AB3E03BAEA800D253CD06C29524D9158025C24B1918D8B9B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348465, "uuid": "a49efc04-6e0d-49c4-8d10-1990d20124f4", "value": "24:8+HemBtfg6IaQxi7+AHil7ttKZ4I0LSgSHBEAtY7uICMeMhmstKH7Lmz:84eC/6YZClJtKGI8SgSHBEAtYVhmstKE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745348465, "uuid": "42a80164-8629-4307-a4da-34fec466bd83", "value": 1406, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348465, "uuid": "2313f855-fa58-4f04-84ca-990baa7b4460", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "246ec6e9-1fac-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745348465, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348465, "uuid": "eccf9cea-6911-4549-a755-120e7d0510b4", "comment": "Malware payload", "value": "dc0555b4291aabc22a7bb188521e2f63", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348465, "uuid": "3a3bb9ec-2559-4dbe-92a6-d31392a88223", "comment": "Malware payload", "value": "e4d081e8a3e490c82253b5a36bda763f9df9fac043b8e03228b3305bb3082268", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348465, "uuid": "89c4742a-9798-41ed-93d7-dedd0275adbe", "value": "T12041692167F98774F3F30E3219BBA65549B7B84AEE258A1E4148414C0C63B24DD39F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348465, "uuid": "a7c9ed95-afac-4efc-91d4-1bb353f1caa8", "value": "24:8fJM+WQHdaOANx+/cd8DZ63fzAliDul/UMkWV8qlqddNXuHY8511yncmz:8GOHand8DuAkIHWdLXuHl1gc0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745348465, "uuid": "a14d236b-ea3c-4952-8f0b-b9317ed2cf80", "value": 2327, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348465, "uuid": "f39bd88f-6e68-44a9-9b7a-62b917666b8d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "247d7ffb-1fac-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745348465, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348465, "uuid": "fee8a14d-2fed-4979-9aa4-6268e5d7735f", "comment": "Malware payload", "value": "503ef2150bd7a60b399fe4b9723cd967", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348465, "uuid": "0d3fda5d-ecee-4b36-be17-b645292b1c28", "comment": "Malware payload", "value": "320b7b134cf4fd366e9e0efd768107bc3088729526af960df8323535f25a6607", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348465, "uuid": "136104dd-7727-4bc5-a6c2-36db30cd9dfd", "value": "T13F5172032A4892386EA602EF423F0EB4FA0A91D5934124BD21FE649465033FDD07F0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348465, "uuid": "f391c5c9-a9e5-4a5d-a150-6e5ef4432ec1", "value": "48:j4k3qNuHJm2Mu6pwKGS2shWE9KGnKGIH50h3wQohJBncK4rehiLK48UPwCK4g0SV:j4k3jpO4KFRKeKvZ6wQbKmLKfKLK7kHC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745348465, "uuid": "33af67a8-8c6c-4861-8264-773990c1ec9b", "value": 2517, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348465, "uuid": "394bfacc-6313-4606-83b4-ef5340a2a0ca", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2485664d-1fac-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745348465, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348465, "uuid": "2c3f61d8-dd23-4612-8293-534f5cb70783", "comment": "Malware payload", "value": "5fcf63ff1135e1aa9ecaddd65e43ac3e", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348465, "uuid": "a1187cde-3ce3-41ad-8d00-81fd4122fc26", "comment": "Malware payload", "value": "e77bc4061bece6d8f81936ecdb81c6b40b130796b12b36312073115e837c3e61", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348465, "uuid": "b2c5a43c-8719-4a90-9343-280a6247ad43", "value": "T1CDC08C1A048EAF50C0A988C9027D0280B421D1DB98402CC800F81CBE7A4851247216", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348465, "uuid": "14c19c53-19d1-408a-8bf7-d841b4496877", "value": "3:mKDDf09xu0WiXyFGIBK56NF8XnoQABOA5cVSREaKC5WYSgbh5cUmRov:hCxVDGGIOyYn5IOckSiaZ5Wo0rA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745348465, "uuid": "34def5e7-bcb8-473b-b107-9475112874ff", "value": 153, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348465, "uuid": "3b93289d-620c-4c3e-b1fb-4224474881bd", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2494e444-1fac-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745348465, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348465, "uuid": "e74b7252-e03f-4e58-9343-e38273c32789", "comment": "Malware payload", "value": "6e169321964da0f4ecbb79cc86a965b4", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348465, "uuid": "b212ad1f-47f2-43e2-a908-4aa54c28ebb7", "comment": "Malware payload", "value": "a031746cb9e7f1a2fa8ffa5201de26e548e26d8b8e4195724d4dfde062c2a852", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348465, "uuid": "9c57fa1f-ecb3-492c-964a-e0bbf11acf33", "value": "T169519D0237F55B12E2F6AB707EB6C8B24B353C93A881CA5D4211401E2872E188D65F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348465, "uuid": "3e99ebb5-384f-49cf-8996-055d0bce4779", "value": "48:8/HFWoVBtDIkyDM7CRj7c2JnSva2s3RpKS6URwGv2HRpK30:8dRVBtDaDMMjICnSvaNhpKrWbv4pKk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745348465, "uuid": "8e644bba-7694-4b25-b5e4-083e8ede81a1", "value": 2829, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348465, "uuid": "34074b23-9529-41b8-869b-4c0faa659122", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24d46865-1fac-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745348466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348466, "uuid": "0507d9ed-5931-4f44-80ae-be50a7404227", "comment": "Malware payload", "value": "fcbebab50efe0c09cafacca4f008e31d", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348466, "uuid": "4c631688-b8ad-4892-a4b6-fb41f00f3b00", "comment": "Malware payload", "value": "7b7caef32f7a2cc066ead6fa099b8882082b39417638fd9175f72c5207bcb1a0", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348466, "uuid": "d56fda16-af03-44a5-9db0-e64754d17f0d", "value": "T15C710A8D8BE164C5CD362A301DFAEC8BB3653A69209009D99A7A4DCC8DDE0531B5C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348466, "uuid": "ee98193a-3f49-4b7d-b31c-62e1cfac4a01", "value": "96:zr+HmGjUOjwjo61c6VWRLGLUArzfGmBJBfgaf:2wf1lstu/rX4O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745348466, "uuid": "96e0e755-ebcd-4428-ac39-77f0aad7bc3f", "value": 3584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348466, "uuid": "3acaaf4f-73ad-4688-b4bd-1eed33586d4b", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3acc883d-1fac-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745348502, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348502, "uuid": "83108ca8-d0b5-4f21-88ca-facdd78784b8", "comment": "Malware payload (Gafgyt)", "value": "37f8a83f9b7c069b131fd37f657534c9", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348502, "uuid": "a6dd7069-5b9b-4d69-a886-2ca39d2b6d9d", "comment": "Malware payload (Gafgyt)", "value": "f1c98fbec33ba982ecec8bd1e357ba3184b1ca5ca9b3f732123da58a2d69cc57", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348502, "uuid": "b615035a-7110-445e-8687-969682247778", "value": "T16F04E53B67260B23C0E5407011E76633BDB5C7CA30B862D76BE06D9C6F2A9D43592B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348502, "uuid": "07f3c15d-0147-4c1e-abf5-243e40317bac", "value": "3072:rztM3FkRnh5xlqjNM7CQMfKogwphapfzPtJPMuO5B1lfpDm4wABHo9n:rzhhxwmmtBgwpha5z1JRO5BFDm4wABH6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745348502, "uuid": "7107a98b-c561-46f0-a587-df2ca31ca3c1", "value": 186316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348502, "uuid": "8e59ab66-89c0-43c2-b999-af983ca0cb86", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "484e202b-1fac-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745348525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348525, "uuid": "82b38f93-2415-4eb2-a440-7777665dcf5b", "comment": "Malware payload", "value": "78c51b8bd0e0671fe91e9f56154cef4a", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348525, "uuid": "5d943d23-1832-4d7d-a2e6-bdb5c5929e0a", "comment": "Malware payload", "value": "031ba7b9592c4d99984ea41c7a495d80bdb102984c8976f84fc3fda2c6d26efe", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348525, "uuid": "9f1c4ce1-be19-402a-b8d3-e4a690197d4b", "value": "T1395166072C0A92746E7342DF077E0AF0FA09A296874525B830FB659456133FFC5BA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348525, "uuid": "3fdb3681-fd7e-4523-8c6a-34935416d672", "value": "48:3ZEo2/iwNoKGS2shWE9KGnKGIH50h3wQohJBncK4rehiLK48T4nk6owCK4gtAEoD:qDOKFRKeKvZ6wQbKmLKfT4nkZLKDultJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745348525, "uuid": "a5a4b2c8-a801-4f05-98d0-0648e8616649", "value": 3056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348525, "uuid": "a98fd29f-7611-4249-9bfb-b628c0a05da3", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d69c2f1-1fac-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745348561, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348561, "uuid": "85e837cd-f89d-46bf-81b6-535fc744b61f", "comment": "Malware payload (Gafgyt)", "value": "863e993f713c45398a4ea50ff0297dff", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348561, "uuid": "56eb223e-570e-4211-8dcb-b7a5ba72392d", "comment": "Malware payload (Gafgyt)", "value": "1e5f6636f698dca7f07e07900a66d45f0c6d770db7efce3587cb5cc097d7edf0", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348561, "uuid": "52c7f570-df25-4d88-addb-b717bf9d143d", "value": "T1A8D329B9F342C2B3C44706B1115BDA3B4D31B6F7176E6A06E3681DB0AE628C23499F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348561, "uuid": "e5de80ba-3de9-4be4-aaba-3ef5bccd4048", "value": "3072:yclx0/BKMUytBXSwwi3yMzd5h6NFl/0mJswdytNr9:y3xrXZzd5hEWmJswdytNr9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745348561, "uuid": "e7bc8402-25da-4020-ab6f-2929786237b5", "value": 142599, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348561, "uuid": "0b6475fc-e08f-4990-a2a6-2ac177233c1f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cba03a8-1fac-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745348586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348586, "uuid": "44d37966-6783-49f7-af2b-e78c407927c0", "comment": "Malware payload (Gafgyt)", "value": "06799de71e6d08ad682acc50ffd1ffbf", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348586, "uuid": "bd5c75d8-38e1-47c8-8e4a-c30257074087", "comment": "Malware payload (Gafgyt)", "value": "10a93db6d255c2c6305740aca3ceed925ff2e80a585dc8654cb5555a95d2a8ce", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348586, "uuid": "d8da8a94-e2f9-440f-bae3-b8ee49a1b250", "value": "T19DF34B36E0A04FB3C0476AB5286ADC310F1A95D3176F2696663817F04B8F4CEB45EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348586, "uuid": "8b93657b-071d-4f34-9ca4-db9deed86725", "value": "3072:iIC6S15+xRivD3UO1rZX/lw5hjMqkmwsweDdAH:iz1kxR+tTNw5hjMdmwsweDdAH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745348586, "uuid": "f6312453-8e36-46a5-b752-78b769acac60", "value": 158781, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348586, "uuid": "9844fde2-6057-4971-883b-86c9c8f06730", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5df1b4cb-1fac-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745348606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348606, "uuid": "4eefbe50-f563-4556-97f4-5dfdfb8f0a98", "comment": "Malware payload", "value": "a6fded84e3b5a831874aa2379c4cfac4", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348606, "uuid": "86f934e7-358e-4d82-af34-b398c6ab0e81", "comment": "Malware payload", "value": "ed648e1fe77b349f0ed77f615acf712e6310c3b7c2f90027661a2de92cbcc273", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348606, "uuid": "f839cc84-96c7-4b1c-9686-2727531a0ad1", "value": "T1B785333C387E38F8C7523F79CF9F0387D47AF799660115F61D298562822B49AB1D1A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348606, "uuid": "6302076a-f52b-4a0d-bf4a-57c938df64c7", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348606, "uuid": "e709270d-6633-4df0-97d7-c2735e0018ae", "value": "49152:iv6G5MKaL0SKJqRnCBnzONzvAipGOjanV9:iCG5MKaAScfWAipBOn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745348606, "uuid": "b6469674-4a58-47cd-a109-25f4035e7fd9", "value": 1859072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348606, "uuid": "52a6671a-8e90-4fd4-bc60-6f2028ea804f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abd7a175-1fac-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1745348761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348761, "uuid": "cc234713-c772-49ab-8096-a3c054a27208", "comment": "Malware payload (Amadey)", "value": "41750a379423cc7dd5a1f9ab32f85ef0", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348761, "uuid": "75d67fc0-8391-4861-8ad6-1c3801c5a290", "comment": "Malware payload (Amadey)", "value": "c195ee0aeee954015c8be1f3353e28c19d4004e1a094c543f6681a3dcddb33e1", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348761, "uuid": "1f983246-2d90-4af5-b514-b2840a685178", "value": "T1F6A53313A6FE0831E979177069F619E71DB9BCD2472D9362424EAC6D0C380E07A35F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348761, "uuid": "0f4bd0f8-f005-42b6-9b32-ca9910cbb6c6", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348761, "uuid": "ca250e7b-440a-4a91-96d0-710255fedb8d", "value": "49152:uTIWqB6BffBaEGJs+aFTyHrsGXzs8vqGu:fqBfJaEGJGF0rfhqGu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745348761, "uuid": "1f280967-886a-42ce-b863-6a8e90e843ad", "value": 2166272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348761, "uuid": "ae863165-1b5e-45d9-a0bb-8f45efc75029", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "052df8c7-1fad-11f0-82df-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1745348842, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348842, "uuid": "a1ac0c46-9055-4fd8-b5fd-304a3900e5ef", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "5121c768ca9a9ef780e891a98755ca3a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348842, "uuid": "299edc9b-0f42-4674-aef7-2c910f1ccf7f", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "ccc5705fac470de2873e58cd32e14d0d120606c101869bb54e1db6e4cba5d334", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348842, "uuid": "4544576b-1dc9-4ae0-911a-2acf6b0cda00", "value": "T146A5337E2F17BCA1CC1BAC79EAD3AC5B7458FE9E13CC684529859E1D2F42E213D11A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348842, "uuid": "02224348-0f64-4582-ac82-57adee64617a", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348842, "uuid": "98cdaa43-ade4-4c45-9849-b6b3974b90ef", "value": "49152:0AVAyAbMVJeAwIJCy57oxIsStHKiVHV1oPCA1fphzG0lCy:0AzA2JeAfv5EqsSHKiBIfp9G0l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745348842, "uuid": "58caf191-d12d-42ed-9d08-a4df8fb5d3f4", "value": 2125824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348842, "uuid": "708e0d26-5b7b-4377-ba2b-9df2ced352f9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5dcdf733-1fad-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745348991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348991, "uuid": "b1b8695d-c123-43ca-9f84-8f350d676f4b", "comment": "Malware payload (Gafgyt)", "value": "b03e34257b22519c4609237d51b5b89b", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348991, "uuid": "e25ee823-707b-4332-84a9-2e434b209c85", "comment": "Malware payload (Gafgyt)", "value": "cc9d95227bbc17f72a86095945e551e4c6051baefd72e176ac78bfa4d0783ead", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348991, "uuid": "3e1db4d3-3bcc-4e13-aa06-2da2329c257b", "value": "T1D6F30976F811CEB3F04B96B208DB8E256E30A7E31B532122632736A7DE761C53857D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348991, "uuid": "a2dcbf98-776b-4b30-b573-d8cb3046a835", "value": "3072:WClTh9fbCpAeoLqNvQeqacWucW0JcWcB1P15xCB+SopDJ8D8vAJ30XMxLv5Mmmud:R+vQeqacWucW0JcWcBP5QERBJ8D8AJ3/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745348991, "uuid": "5f386f56-d30a-4a22-91f0-adb00d112d76", "value": 159450, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348991, "uuid": "804f429a-adb9-4edb-9e32-5f2d2b859e99", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf0f7bf6-1fad-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745349181, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745349181, "uuid": "06baa37d-2cdb-429a-b629-43e5fa7423fe", "comment": "Malware payload (Gafgyt)", "value": "ed956c51f5e4f7f759b5d293d7331353", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745349181, "uuid": "398fdb60-fa21-4638-8be8-1835f628cef6", "comment": "Malware payload (Gafgyt)", "value": "ff43838caf2aeb647ef94155d1c63d64bf8e78108e22c7de33c576f20dcd4a54", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745349181, "uuid": "1e84aec4-fe9d-4562-a196-59ba55a1c28b", "value": "T141244C24E5404B53C2E323F9AA8E428E3B3347E563D773154A389BB43FC2B9A1D759", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745349181, "uuid": "4d3f7929-37cd-48a6-9c78-b4376232ec53", "value": "6144:NtpKaECwXhQIFzkLQ5ha26K2axVPi2m0wfB5RyAn:NtpKaECwXhQkX5haXyg2m0mB5RyAn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745349181, "uuid": "00607f3e-d316-4610-aede-fcc572ccbd96", "value": 209630, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745349181, "uuid": "386c8a75-3125-498b-ac9c-4d9056ae92c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "907cb516-1fae-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745349505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745349505, "uuid": "749935c4-ee52-4bfc-b330-2d7477119c00", "comment": "Malware payload (Gafgyt)", "value": "3576e3a130df6ece05c42426bd70f0fc", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745349505, "uuid": "564dbfa0-9ee3-416f-a219-48f7c7cedd83", "comment": "Malware payload (Gafgyt)", "value": "2a11d9b6a62ab43b45dcb09f592b402963c7d66d38c57414ea4eaeab31e848cf", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745349505, "uuid": "bd860db0-558b-434f-9006-df0721bc8024", "value": "T188F31A33F2D18CFAC04342B027FF9AB2DE22F1FB1776311727602D605E5A9865E59A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745349505, "uuid": "e4b0e658-a3c1-4912-96e3-bfd8ba368dfa", "value": "3072:a8L2FlZkVf62TCX5hGhfSphahpCn38ntVAlZn31mBT38dAY4:Ms1Sphabka6lmBT38dAY4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745349505, "uuid": "a52f0939-536f-49dd-9a2c-810daee06e1e", "value": 159140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745349505, "uuid": "01bd76a8-1a42-42a8-b1ca-e825a83a1ea9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a896161-1faf-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745349952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745349952, "uuid": "b2bb06c7-bc37-4d6b-9348-2b0b8f958ab4", "comment": "Malware payload (Gafgyt)", "value": "5728f5525c18981ed7dd41f4f78d46eb", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745349952, "uuid": "dc2732fd-c3d7-40da-af31-d4cbc6377c77", "comment": "Malware payload (Gafgyt)", "value": "95993d881bb33b224a7c9f359a07c4cafa1fb0ad9899aa2be8504c83474f2b0b", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745349952, "uuid": "f1bca56d-a1de-4515-9d73-75cc5c1bf03c", "value": "T1EEF35DB7A21D0743C4C745F02E6B7FF24F6895E222F3A1855A1AEF905B73AB21061F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745349952, "uuid": "c45a9ec6-5e05-4493-906b-b450d491d8a1", "value": "3072:dmUa28vWvc7uGX8wul/2A5hLW2IfmRsSiSh3n:dmUaLvWvUX8P/2A5hLW2IfmRsSiSh3n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745349952, "uuid": "9f91ba45-9e64-4515-91f7-d8e15301e17f", "value": 161093, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745349952, "uuid": "e9703e42-7911-4e01-b2da-5877cb199f66", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "296c088a-1fb0-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745350191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745350191, "uuid": "14ed5e57-a8a7-4c4f-ba7e-e4209d2df335", "comment": "Malware payload (Gafgyt)", "value": "9ce8f79b86c04d8271b576304c1cc2ea", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745350191, "uuid": "02eae77e-fba2-48d7-90e1-0f69b3633225", "comment": "Malware payload (Gafgyt)", "value": "e51420f63e3bb6129849ddb8d47f4ce456421b32c4fd7c57d12fde799ce3b9f8", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745350191, "uuid": "1f7d41b5-20c7-4dba-a67a-8001c5a9442c", "value": "T190F31824F5408267C2D327FAA69E838D3F3557E263D733141A389EB02FC2B952D669", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745350191, "uuid": "d84c3547-5af3-4b94-8fc8-e0f974ccea1c", "value": "3072:xdy8WoZgeDvGvnlIoFZv8Rc0xk+Q/P65hsv7oiUmSQnNbGUBn:P+vliZxk+QX65hsv79UmSQnNbGUBn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745350191, "uuid": "56ccbb71-a349-4f78-acab-5226a407b7d9", "value": 171215, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745350191, "uuid": "88b9964a-d147-4d1d-bde4-101411397220", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ddf280d-1fb0-11f0-82df-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1745350279, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745350279, "uuid": "699b43e8-bc08-4292-ab2b-ecef2ed9912d", "comment": "Malware payload (Gafgyt)", "value": "be286c1bff5ef5f20498d00dce2806d8", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745350279, "uuid": "626dd403-d35e-481a-b6b9-15e54257a0a8", "comment": "Malware payload (Gafgyt)", "value": "36ddeb8e1fcdc46781cd49306f2ca9c244190e3e82dd6290dfabe73b8b524c4d", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745350279, "uuid": "9f44c6d9-9552-434f-8b26-3d5e81e17847", "value": "T1B8249479B7611EB7D81ECE7301DA4912188CC28653D97FABB2B8C618EB9794F04D3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745350279, "uuid": "d7811dd2-3b8a-4b23-841d-aa0e4793065c", "value": "3072:T4mSFGv/kKOdcXVKRd835hGH3yJCstmrpy6n9Nn:pn/9SbRi35hGXjstmrpy6n9Nn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745350279, "uuid": "dc07e2dc-a6c1-4241-92ff-1fc48225569e", "value": 214648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745350279, "uuid": "25f786ef-cf63-4827-b53d-0e0acc1508db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89e3b0a1-1fb2-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745351212, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745351212, "uuid": "d331042f-8d86-4eab-82dc-78ea9d65dfaa", "comment": "Malware payload", "value": "33c1012ebfababf03a86b738cbf6df77", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745351212, "uuid": "b2bda6b4-0db0-4293-b876-8736865b552c", "comment": "Malware payload", "value": "e685eb238cd96d201f654f8e5e064bca82545436d7f7b12841e957057afef8a8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351212, "uuid": "d3ae777d-d60f-411b-8b76-3692d520524d", "value": "T10595123C763E1C3FF28949319623B8394BB72DC6E2DA17BC6E1216B635A5EFB15100", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351212, "uuid": "9f2dbc9e-9b85-42b7-9e4b-c0420073d8f3", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351212, "uuid": "ecfb47eb-3d07-4ff3-9d47-89f115c0e222", "value": "49152:kcWtHtDJJMjk2jDwcndEt33b67ZPleDy:qHfK9j0cnytCNeDy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745351212, "uuid": "7d059aba-af89-42f5-83be-6d01859100d8", "value": 2055168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351212, "uuid": "541ae476-f873-46e5-a292-3a227eb3fed9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b6df0e5-1fb3-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745351456, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745351456, "uuid": "6dd0e8a2-304e-48da-8dae-76f27ca99447", "comment": "Malware payload", "value": "fd531850eeaa577677d11905bae9f2a2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745351456, "uuid": "501033ff-f21d-4e1b-8479-02fae60e35f3", "comment": "Malware payload", "value": "36363df9250b5b65fb018fb246fbeb19dd3c7e98306643165bf81bca37fc8fb1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351456, "uuid": "9ad811f0-670e-4449-8680-3f7466674755", "value": "T105263334AF019C90E9FFD0765B0649DFC7E840400B3309D229271B959AA3F9E7AE5D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351456, "uuid": "e5a036f1-4fae-49ea-b304-ab22078dc092", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351456, "uuid": "6fdfe2cd-2a18-419d-80e6-8aa925c55ca6", "value": "98304:Rb4nWfiFCiYWzL/aFwxqwy8476Ms+Y2YlqazvT5J7GjB:RUWfoCiYSLyFwxqwyN6MsOi9T5J76", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745351456, "uuid": "a77d58cb-98d2-4e5b-a482-b3f39ff944c5", "value": 4580864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351456, "uuid": "a7f07cbd-e936-465c-a7b0-74122c48472f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "999f8f8a-1fb3-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745351668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745351668, "uuid": "d4cd025c-ccf9-467c-8e15-f85266aa2ef9", "comment": "Malware payload", "value": "cf90b2965abb1dbef91fa0d675099eb7", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745351668, "uuid": "e9ded2ca-d915-483c-af88-73aee7ddc314", "comment": "Malware payload", "value": "1e253f7d460a35f9f26d3d0a509d6e4305b250c9e15d8ec1158fbd1a8538436f", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351668, "uuid": "39b5b242-b511-4831-9846-761f222d6d79", "value": "T1BC95336A7FA66077E41868BCEDD732A036BCA79B34B6655BC944073E0C8BF01AD4C4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351668, "uuid": "24ce4aab-ec57-471e-bb8c-e36e3276f1b4", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351668, "uuid": "6fc93c08-e90b-4231-bc0c-bd65e50e9c5b", "value": "24576:2kTg7qhH+JrZr2mhyhPHtKPc6O0Fa/BM0C6OOn4QBKg7YxZaIuNzJo4uFEHiqG:2kTPheJrZT8PwJZca0ujQIg7IZ8n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745351668, "uuid": "165568f3-19e3-4124-ae7e-348ec33cd302", "value": 1897472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351668, "uuid": "87ab9441-07c7-4738-8b9e-37f5b5eb66c2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2755b218-1fb4-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745351906, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745351906, "uuid": "bc3846af-4c40-4cb4-9e30-c7a709b702f9", "comment": "Malware payload", "value": "a23ade9749018caa86b06567cb70c0e5", "object_relation": "md5", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745351906, "uuid": "1515172a-bb45-4d55-98a0-693338df45ab", "comment": "Malware payload", "value": "9b3fb960918bbf40e4740d81e729ab8045cf9fcf2c8ccc9d02b762396ee2cb65", "object_relation": "sha256", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351906, "uuid": "f8799adf-e5d6-4f60-a3cc-71f70001d192", "value": "T1B6251E9566F90069F5B237741EBD92A08E3FB9519BBAD5DF034C060E0AA7ED089347", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351906, "uuid": "89336045-46af-4602-b6c8-81f7cb7c2033", "value": "df600280bfaa63bf70c653bfb634058e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351906, "uuid": "1d423b2b-5a1b-4e65-9148-a4a89ae9f62d", "value": "24576:BdBs/qkBdBs/qkidBs/qk0dBs/qkOdBs/qk:LBOLBOkBOCBO4BO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745351906, "uuid": "e34e6504-f252-4f13-a5b6-e41cf36176ff", "value": 1011138, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351906, "uuid": "a11c910d-b96b-42a5-8fc6-0c175c306d91", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46fd4ba3-1fb4-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745351959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745351959, "uuid": "7fb8f4aa-885b-48b1-b4e0-3cb475c6ac39", "comment": "Malware payload", "value": "3b4cbac8dad90d932e233a89650530a0", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745351959, "uuid": "d0fc1e5a-7425-4de4-afbc-b9950c4d2eab", "comment": "Malware payload", "value": "d8fe935ffee91b6d589392e60c0af2c0de956b21fa9b752a468bbbff6a495afe", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351959, "uuid": "6223e078-ce12-423d-8602-6560d0140f6b", "value": "T1180526046BEA0325F3B29B766C76B710887BBC1ADE168F9D015181881875624E4B4F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351959, "uuid": "91769399-2732-4245-993e-7d1ad0aa8601", "value": "24:8Ayw/BHYVKVWO+/CWX62fV46/KkDdd79dsoEZ/7QAMN5:8y5aj62fV4YdJ9ha7Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745351959, "uuid": "ad6e7336-2532-4b81-8718-9b38b794886e", "value": 869633, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351959, "uuid": "cd863ec4-2419-4139-9b77-732b458cb178", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69ad7c1b-1fb4-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745352017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745352017, "uuid": "10cbe77c-53a2-4766-87f0-5755a1e236c1", "comment": "Malware payload", "value": "ca37b8176dfda14572236b9773beb836", "object_relation": "md5", "Tag": [ { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745352017, "uuid": "b97f8bb4-4b37-46e7-933f-2af8cc562c29", "comment": "Malware payload", "value": "953528f4be35c25e2378b95affbd1a32356fa55186035c1bfdaacd52c6c4f1c0", "object_relation": "sha256", "Tag": [ { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352017, "uuid": "565782cf-5121-49e2-a26b-2906f9d9b683", "value": "T181C1C51ED604022A93B237FA0D058C0EF78F415F92525F1875ACB4843BF616E46B6E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352017, "uuid": "65be242e-a010-415d-be4f-32584ab608cb", "value": "96:KUBc1ZcxrGhs9Fyypsd4XBpuBVkDxGy6OphNHOSSDrSSSKDU4SXDZAByg+TlkXeh:cs9/ad4POVk1Gyp/SD2zKDUtXDZABygo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745352017, "uuid": "61eb2f9d-da42-44ff-83ff-8c510ea17fe1", "value": 5942, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352017, "uuid": "5eeae49a-54e0-47f4-a15d-65218c921184", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4b996a2-1fb5-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1745352546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745352546, "uuid": "cb9e73c8-6a6e-41f0-9f10-9fcdcceb3ca0", "comment": "Malware payload (Amadey)", "value": "7e081d2b3652f28adbd86851409a868e", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745352546, "uuid": "575ba4e7-722d-404c-9af7-da546606d166", "comment": "Malware payload (Amadey)", "value": "c7780d08525bf94a1d7049ccc910134e96cb10f5db537053a50476a9fe1c71c4", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352546, "uuid": "b58e1288-2e9e-4506-80b8-d5136fc2c057", "value": "T1CCA5335BD9FD1036E96013B08EBB03D31D3AFDA52B24115AF749086D6C92590AE39F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352546, "uuid": "0f8169b1-a74a-4c60-8184-b194e48ba7d7", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352546, "uuid": "6ba190a5-98ac-4e2c-8f5a-6f5c9a6a523b", "value": "49152:n3IWqyA7Q6ssadyDQUeeNLbhPC18/n4Ifol5b7ZO/0e2T:4sRdQeeNZPC18/nYjZ00dT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745352546, "uuid": "a62e78c0-6723-446e-8909-ec4bef4fc019", "value": 2205184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352546, "uuid": "82b1713b-b3b0-47c0-b1ef-8c93069096d1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be69d1ce-1fb5-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1745352589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745352589, "uuid": "41686f3d-bce0-4d13-998a-d0114889d3db", "comment": "Malware payload (Amadey)", "value": "436708e713292f88c66b005ce4e838b8", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745352589, "uuid": "44bc36de-e8ed-4adb-951e-0cc9ec004aa2", "comment": "Malware payload (Amadey)", "value": "8a40973c6a2081649b0ac01dabd868546825086780cb67b4132f7ac001d0bcbf", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352589, "uuid": "4520baab-c6ff-4927-8ffa-720f63697e4a", "value": "T1F4159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352589, "uuid": "f95c9ad2-a951-42ea-ad7a-c55c7ccdd262", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352589, "uuid": "ac36020c-dca2-4af5-a08c-d4123fab519c", "value": "24576:RqDEvCTbMWu7rQYlBQcBiT6rprG8aepV:RTvC/MTQYxsWR7aep", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745352589, "uuid": "d1af5d12-c4be-4eab-81fd-1d8c687a99de", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352589, "uuid": "9d760c1f-e071-485a-9dd1-80d060fc9ac3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4475502-1fb5-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745352652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745352652, "uuid": "0df12577-4bb1-4dc8-a6a4-98d263ddcf00", "comment": "Malware payload (CredentialFlusher)", "value": "347ebbf62eaada8ed8222aab9ece3fe5", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745352652, "uuid": "baf640b5-3b6c-4d53-9549-5892cd6ffdfb", "comment": "Malware payload (CredentialFlusher)", "value": "742114193f1cc723b2d793976c95ae25492841ffd719a6d7e000b037f771e3a6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352652, "uuid": "0eb47047-f379-41e5-8935-617f6828fe0a", "value": "T112259E027391C062FF9B92334F5AF6515BBC69260123E61F13A81D79BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352652, "uuid": "56ccb2ca-21fc-4f1f-9ad2-a12fc08770ff", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352652, "uuid": "742822b9-1522-4e2b-801b-8806bb55cb94", "value": "24576:YqDEvCTbMWu7rQYlBQcBiT6rprG8a2rWuR:YTvC/MTQYxsWR7a2y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745352652, "uuid": "9b9cc493-f0f1-4d43-aea8-eb5e1bf5b783", "value": 968704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352652, "uuid": "a29798b5-8f6a-4d33-8468-05799daddd40", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4fb2b150-1fb6-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745352833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745352833, "uuid": "5b3e4f71-e889-4ee7-b9b4-c0e9c950dd9a", "comment": "Malware payload", "value": "febf9b42cd6a7badb3b8ca4638382d3e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745352833, "uuid": "5c0731d9-1417-4c69-b383-27d6695d7cc2", "comment": "Malware payload", "value": "8a8b47176c7aa262004a6fecc0d3170ac2b54145e56b8f151f55a7a285903f7a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352833, "uuid": "8022f2cf-f209-48f1-b0bc-fc31d2d5f103", "value": "T1225533CE861B04CE0F32EE6EEBEDFB47462D245626A20F1C67165F07862F0951FAC5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352833, "uuid": "7bfe7d1d-7dad-4bab-968b-42c246c49772", "value": "24576:hadGQ6Hwn2SzvB1ORcAHx7KoFNGRgK35cQAWsndsg30HLdL3WSDgj2dBNFP/:hadI8B0vHx/OWKJCWyE4wgKd9H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745352833, "uuid": "fd75542b-b51f-40a9-81ed-46d782c0fc06", "value": 1341615, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352833, "uuid": "5bb3fb99-6da1-459e-91fc-ff4880ec1b79", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad7a6b04-1fb6-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745352990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745352990, "uuid": "7da7156d-99d6-426a-8161-f13bea23a612", "comment": "Malware payload", "value": "876813d1d9d68d141d4015475f005592", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745352990, "uuid": "1b04c6ba-6919-4e39-a5cf-4ef0b3eaca96", "comment": "Malware payload", "value": "1dfa9e2e5e88b5ccb8d22dafe4e4aac2e4633d45e971740f8887a98a417bd903", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352990, "uuid": "63147e8a-e4c1-4407-9f89-c8950b03131c", "value": "T1D2F3DE2D6E21BB7EE6B882314BFA6FB4D35611D336D1C680E17DC6185EB524C0C8EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352990, "uuid": "7182e75e-e1a3-4231-b5ff-81a469443a7d", "value": "1536:vf3lHxneZEuChQ3cqn3nmUaPxQaw6sUHYvGcfLARzeobAceqJF+GECKVdobNpJ+n:Lgk26sUHYvhTvobNp7oUrlmXLxR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745352990, "uuid": "da78b1ad-266c-46c3-931b-26fb75d1942d", "value": 162372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352990, "uuid": "02f264fb-2c52-413d-9707-9ab2e8b4c01d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ba7f395-1fb7-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745353228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745353228, "uuid": "ec109047-86d8-4b2e-a498-ac7e33996593", "comment": "Malware payload", "value": "668b282dfb82bc4f248768d2f4e6e7ce", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745353228, "uuid": "3007c347-68b1-468a-8a06-bb7d6e777d26", "comment": "Malware payload", "value": "41de5be9d1c94e67aa58a57596164d38b8d43f18684ead416f24ef1808a1f4f8", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745353228, "uuid": "5689893f-0356-4d08-b058-5f1b95cd0d78", "value": "T1F8C3B748FA54A72DC7E1B6FEEF5812CE33370B98B3EB39228E31065527C9B2565354", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745353228, "uuid": "ff517236-72c4-4a01-92eb-0eb2454d8d47", "value": "3072:OettGjqpzgFNoAGiQyvAbtyfndgCQVxq:OmjandA7q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745353228, "uuid": "8368716c-dd7b-4420-811b-5fd01d8a0235", "value": 118308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745353228, "uuid": "070054f2-b42a-48cd-9e65-a61e9ed6ac17", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c1d2bd5-1fb8-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745353712, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745353712, "uuid": "1a592197-8faa-4fa5-9c78-3c94bf58f1b8", "comment": "Malware payload", "value": "c3869d75f44cb5c376a9c7ea4f0a1f37", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745353712, "uuid": "b3007a59-5031-4c9c-a3c5-12d6cad407b1", "comment": "Malware payload", "value": "8decadc59c82e661912451fd26753b74577c4238e1bf8d20d0cd2dc048b604fa", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745353712, "uuid": "218df5f1-dcad-4ccc-9568-141e81f53d18", "value": "T1C1F3EFAAAB715EB7EC0DCE37009D4605519C925A92DE2F6FF2B4C518E38B90F49D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745353712, "uuid": "0ab77438-2379-49f3-a9a0-1a56e525b455", "value": "1536:voIoP3L6VmZaTVU28D1T/RMElALRLiXyI4gJRCJSIUcoMMiLx/+t6pL:voWVPSkLxm8L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745353712, "uuid": "325c7815-a4b3-4036-97f1-7288ade68f0e", "value": 162196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745353712, "uuid": "2b4df5d1-b733-4947-b3c5-232e334fb91d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "548759d4-1fb9-11f0-82df-82aee05be84a", "comment": "Malware payload (Rhadamanthys)", "timestamp": 1745354129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745354129, "uuid": "ef4e3ba0-3637-4266-858a-0674f9cc6d5f", "comment": "Malware payload (Rhadamanthys)", "value": "616976ed76630aeafbe7312a8a5112e6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#f4ae28", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745354129, "uuid": "ae1a9b22-90e3-4485-9008-c76aca0c82ce", "comment": "Malware payload (Rhadamanthys)", "value": "4009f9816fe4fffa008e2da1d575d253e53f6e1f148c839224144647749ead7e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#f4ae28", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745354129, "uuid": "a0c611bb-2b88-4cc1-baaa-81fd804afad6", "value": "T176A63322B9E140B0C5205A7119636691D6FEBCA1ABF2D6CF8370767DBD3A0D3D7329", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745354129, "uuid": "7cdcf9d6-bce2-45f4-b8a3-3e1604178266", "value": "75e9596d74d063246ba6f3ac7c5369a0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745354129, "uuid": "4d2f13f3-3938-4c49-aca7-93ae05cf9356", "value": "196608:cjCd49GJxzIXUXHDK7MJPa6NQ8sqdZR5dqYoeBaQWL76xu:UCKa8XSWQJuG+fQWLGxu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745354129, "uuid": "16e3d151-3c68-4f18-ae09-8e37380c36a5", "value": 9640517, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745354129, "uuid": "6433a07e-e5c3-453f-9e96-3a6179c76470", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9277ac1c-1fbb-11f0-82df-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1745355092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355092, "uuid": "b30265cb-0b82-46a9-9d15-6a18872f6a0c", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "105628002d41dc286705086843956dea", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355092, "uuid": "0b600d2a-a5d6-4347-a1dd-c156520c9d41", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "856a76672e87679a22fe295217452238965ae79bddd3e56ead14f77a693c4f08", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355092, "uuid": "a1efac42-4c21-4221-a712-7cd43c6b5f1a", "value": "T13BA5334B8B55A63CD817037191638623EE3CB692C1576F55E75E233E4E3223522B0E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355092, "uuid": "171ed533-a4b0-44ce-a871-03f53452727f", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355092, "uuid": "0b62ca1b-6f41-4498-a9d0-d3335515c9b2", "value": "49152:t/4NUpzYRdaN9xe1dNfczFF+ZP9kQOW5VXFg+aW31xXt:ONUpWM9oa/+fg0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745355092, "uuid": "cbaf46e0-2995-408c-a68f-e0cf22a732cf", "value": 2151424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355092, "uuid": "471130c0-4fe3-4e31-a78e-160437ebda18", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a7723c2-1fbb-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745355105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355105, "uuid": "9ced95a1-d688-4374-9ebd-7d9b5da9920f", "comment": "Malware payload", "value": "1c59b7f1ae2427f2ca7452d57a24f94f", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355105, "uuid": "a781165e-44b4-4d5b-916d-270934c2ba74", "comment": "Malware payload", "value": "0849aacc1cd9e4edfbccaa35876b4c65afa4e9ec229ecc2d6b383031c694dd17", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355105, "uuid": "c6cdb67d-5c6e-4fd6-bc2e-b01a429a74de", "value": "T1FF53F97766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355105, "uuid": "fd71b9a8-b9a9-455a-9b85-f2194c007863", "value": "768:aA1fh41SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/tAsR1X1t1RB1pydg2sA/:aA1fh41P6n2ysR1X1t1RB1pydp1l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745355105, "uuid": "d4e12727-4fb4-453f-9ffa-a61f5183720b", "value": 64454, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355105, "uuid": "2298c200-37a4-41e5-820e-9c52c044fc2a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce871f5d-1fbb-11f0-82df-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1745355193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355193, "uuid": "d48a2be9-7c89-4ec3-b29f-fe757c2949e2", "comment": "Malware payload (Mirai)", "value": "1d2f3c6df0ec99fd3e5d430893e0b9e9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355193, "uuid": "54af207a-645e-4afc-b111-802e57f11a8d", "comment": "Malware payload (Mirai)", "value": "485e5a1cfdaa528c1631968a09e56c15f46a610c8a88e50a75236cede08d9094", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355193, "uuid": "2b5b2858-576b-4286-aa06-ab52b0d95374", "value": "T14CB38548FE58936DC7E2B6FEEB5C02CE373A0798B3E639264E310A5533C976165360", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355193, "uuid": "3c7ed311-20cc-4247-9e5d-20ac11ac6371", "value": "1536:fG+WM1h4x1ZD9sXxEyoWhwV/kWc6YnhXIrhwvNmzqTt3ZgEtAFqRFeAqBVxZ:h1hLxHo0mrhGiytpT6FqRFeA2VxZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745355193, "uuid": "d212eee2-51f0-4b1b-a6cb-a709f7557e3b", "value": 112468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355193, "uuid": "65d6e141-4647-47b8-a0a9-77d88edf946b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20c0c51c-1fbc-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745355331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355331, "uuid": "90b67dc9-c503-4495-a467-30706ff6b937", "comment": "Malware payload", "value": "5e2e0d6099af3a610ad0ee70fbf3eae5", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355331, "uuid": "6f50764d-f6d7-43b4-beca-669145cb3386", "comment": "Malware payload", "value": "cc842f03e5bb0da84418837f68995056b6c3e4ffb8275bd39bc826ece3f3db62", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355331, "uuid": "3357487e-4b58-45ca-aa57-e5cf39764ab2", "value": "T1679533BEB40A85EDE98F0EF6243B45383C524D7D9495C70066E28295BFA38F4A3354", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355331, "uuid": "58f8d83d-8d53-4bfd-8e33-993f3818b27e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355331, "uuid": "d2e9eef0-77cf-4424-bdfd-3415c1820d81", "value": "49152:CQ+ovBaa0M2OClMNkCtavJ65WCj10xksfK:CwXklok6Mbfxk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745355331, "uuid": "a3e1f5b0-4256-4365-8f5b-8597d216c59b", "value": 1918464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355331, "uuid": "4d7586ab-05aa-4657-bcb4-b0d704822151", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72cca9ee-1fbc-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745355468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355468, "uuid": "3592b31a-542a-49cb-993d-b3fb7a7d37e3", "comment": "Malware payload (CredentialFlusher)", "value": "0d3a87d2030bb4df3bc31fe48cc5adaa", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355468, "uuid": "2afc9625-7bce-48b2-9a2f-84180804b29f", "comment": "Malware payload (CredentialFlusher)", "value": "377a86ed283d55314e3e175b32bc45c833cf086c71ec4898e3242bded2d16577", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355468, "uuid": "e9bbd292-8b95-48e8-9fdb-fd657c1bef20", "value": "T110259E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355468, "uuid": "97bc212e-61c7-40e1-acba-b0f72b8378a8", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355468, "uuid": "f903715a-e8f4-4d72-8c6d-81432aa32899", "value": "24576:3qDEvCTbMWu7rQYlBQcBiT6rprG8a0se/F:3TvC/MTQYxsWR7a0sC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745355468, "uuid": "1dbf55f2-1f57-4156-9d72-ee4c7e3a2565", "value": 971776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355468, "uuid": "f82b57c4-7b5a-4a32-861b-83a53cb11f4b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a32c2ecf-1fbc-11f0-82df-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1745355550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355550, "uuid": "043a0b25-342d-485e-ba43-3ebfc50cb05b", "comment": "Malware payload (Healer)", "value": "af0fee9e99ded7b06e67e0704d762d64", "object_relation": "md5", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355550, "uuid": "c2ba97bc-5187-4003-a43c-b3bd76017252", "comment": "Malware payload (Healer)", "value": "f88b84cea0195360397d60f45473e7ae3e0c1137aebba43756c4600aa27e3e1b", "object_relation": "sha256", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355550, "uuid": "610579ff-a080-4188-9ad2-b527d94e913f", "value": "T1398533566BC266EBC92D1DBA080A70E86BF1E4B700CD0BC36DCB5262342755377D4C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355550, "uuid": "c784bf65-df69-45a6-a580-b72ea6a2606c", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355550, "uuid": "294ae5e5-b18c-4c9a-8af7-bce07c4e9f21", "value": "24576:JDhC7/Im5sf56Bj8Upr+pHWLPpg1/KV1u7RepKsFcjD9W2oslN1oFcIoValn1ju/:XC7d5sfp3cLPpg13Zs69W8N1lneVuam", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745355550, "uuid": "083c6ed9-507c-4ddd-97c5-775a8217a45d", "value": 1773568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355550, "uuid": "9fffdebf-ba2f-4fdc-8f3a-3ac92f948783", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aadb430e-1fbd-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745355992, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355992, "uuid": "4201b48e-e566-4df2-b680-5efe94b782ec", "comment": "Malware payload (CredentialFlusher)", "value": "88d4753f70f38961abac9de44b7b0197", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355992, "uuid": "7d735442-928e-4493-97a9-c91f41703cb0", "comment": "Malware payload (CredentialFlusher)", "value": "fad408cb67ae62902ec68983c50109e269517b7b412192f5341fe228204aac89", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355992, "uuid": "51f78dfd-8a1b-458a-81a7-11ceda60c416", "value": "T149159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355992, "uuid": "7cc58bd5-29d2-469f-bab8-841248ac3800", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355992, "uuid": "ef5b2fcb-a5a2-4d2f-80e3-e3cfd57d560d", "value": "24576:DqDEvCTbMWu7rQYlBQcBiT6rprG8ae3V:DTvC/MTQYxsWR7ae3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745355992, "uuid": "a8b94559-994c-4372-988f-ae71e942d955", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355992, "uuid": "1e02e6f3-8d1d-4616-a863-f858c623700f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3b44555-1fbd-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1745356060, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745356060, "uuid": "506e37a6-2232-4e38-9c56-bdb952899084", "comment": "Malware payload (Amadey)", "value": "2805132f5c0bef7bec49b7fcf8089c40", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745356060, "uuid": "0adc8dce-051c-459c-8ca1-711ec9f8a4a6", "comment": "Malware payload (Amadey)", "value": "4ac4fb9719afda423f9333e6e46141e0608ad0ca6f61150b70b38429f421adff", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745356060, "uuid": "47190e82-258a-4712-911c-a587f51ddc7f", "value": "T163A53307F6D88173FAE92B7114F316930A367FA6B93A4202668D7C5D5C3127079B27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745356060, "uuid": "e427ad13-9402-4a50-9c07-700fa7db350c", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745356060, "uuid": "3fb7be8c-3032-4df9-bdf3-1e51a9ab43e3", "value": "49152:VwIWqdUtMJRunQFsSS+yRz++PbzLLy44huWw:/j4nnl+Iz+uf0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745356060, "uuid": "aa4e7ada-49e9-4f3a-8704-34de677ea75d", "value": 2224640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745356060, "uuid": "43209698-3ed9-44a1-bc1c-67e2fe43d3ab", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cada711-1fbe-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745356210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745356210, "uuid": "ee27e726-393f-4d22-9365-bd936dda36b4", "comment": "Malware payload", "value": "347441ce25b8c46abb652567c0921e07", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745356210, "uuid": "e153400d-1c18-4934-8c06-29373d956a2d", "comment": "Malware payload", "value": "5c5ee877014779a21eeb09680dd568aeac82c824b940b9bbaefb42dcc1e94709", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745356210, "uuid": "69abaaed-68a8-42a0-bcce-e1bc16e26d0e", "value": "T18326335B9FE4A22CFCDAA8FA3E52691633427B1A45A56F270D0D0028F403FD575E1F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745356210, "uuid": "a7e8b807-8e27-4647-9be8-b0f66d969475", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745356210, "uuid": "df198de6-f34d-4c4f-852e-16ff3b3c2618", "value": "98304:3XF2VxDm4FXsQCAsEYoOL9N5zMSab9cHBuIRe8B:nU+4F8HAsECn5Sb9cHYe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745356210, "uuid": "8d057bfb-a63a-404f-9dfe-f0afc682c971", "value": 4638208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745356210, "uuid": "ea726f8e-571b-48b9-b817-92912a46969f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8fb72f4-1fbe-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745356472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745356472, "uuid": "80c06648-e406-4a7d-a6f4-257b2377e9c8", "comment": "Malware payload", "value": "892d123518e97030516036b824b7add9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745356472, "uuid": "52889f22-63ed-461c-881c-f138bf8926b1", "comment": "Malware payload", "value": "225314128e563463e266532c5db603afb36ca3fdfd5949b4c800ed3a9b52ebc0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745356472, "uuid": "ae14ea4d-de90-460d-a29b-b5cf5f1ceb11", "value": "T15E34F14564B27842F3B4E016A192C559600B8CE4FEA1F3D1ABF8C96C7252B71BF07C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745356472, "uuid": "88535b6d-ac7d-4270-93c6-57225f776f16", "value": "6144:om8vJrok7Ubm2l4hoQpRIz4cgKfCI7FGpPCz/XFLOczViLL:H8RrF7splgcCI7FGqXFK2iLL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745356472, "uuid": "deb589dc-5569-4a05-a6d1-f1266a554a9c", "value": 247883, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745356472, "uuid": "03e2e7da-1c41-43b8-824b-d120a8ff329d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48daf007-1fc2-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745357975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745357975, "uuid": "d62fe200-167d-4f21-a41d-5bdaa05d67df", "comment": "Malware payload", "value": "f898b3d02e2acf0b2323acf87c827c5c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745357975, "uuid": "fcc3f568-be8d-4b28-9b19-5936dbad7fba", "comment": "Malware payload", "value": "5f5f71c7a353bc8ca4575347edfa914c355b11890991715c827d570a3bc5b57e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745357975, "uuid": "07727914-fdb1-49dc-941f-fd368cb22156", "value": "T131A512394E38618BC11194FA1FFA81EEBBED102F5BA894E82E09F14F4713E53D585B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745357975, "uuid": "63be26cb-31e4-4254-ba8e-abd7d1ca08bc", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745357975, "uuid": "5bb94e4f-a375-494b-9af3-c2ee03d0c315", "value": "49152:zjBTxRzwigjmXh1OUuKT1nVZcUtrzREVrA:zjBTxRzwnAPuKxVZBRmA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745357975, "uuid": "d9eb986d-932a-4a3c-897c-8251024cee96", "value": 2068992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745357975, "uuid": "d52b9d68-0723-422e-8c5b-5ca101d28b24", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54493713-1fc4-11f0-82df-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1745358853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745358853, "uuid": "06e68796-bd16-4340-af1b-881249d87562", "comment": "Malware payload (Healer)", "value": "fda1701befef631010fadcc5a3c54467", "object_relation": "md5", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745358853, "uuid": "9b58df22-6794-4e54-947f-d09f7e7482d0", "comment": "Malware payload (Healer)", "value": "c4a5d67c4581b97ec505ed7c25cb6ff72888f56fd378bc3b1739e3f046bbcb48", "object_relation": "sha256", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745358853, "uuid": "b2543a22-e903-4ab5-9b43-18d1045fad20", "value": "T15C853356DB30227DF0B9ADF14823B660E87D4701A45C70E247A4CBF0D91B4B1E9A3E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745358853, "uuid": "e704181a-94cb-4bd7-b322-a99cffb21dec", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745358853, "uuid": "1f960333-2b63-4f63-8ca9-09ea841c7b79", "value": "49152:ndyYo5anomiinBo/4K9nGtwsyUTiRQmM0ilQ:8lcomiABo/4BWdUwM0CQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745358853, "uuid": "44ac7c52-feb6-48d4-b108-b94f16344cc4", "value": 1807360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745358853, "uuid": "23438574-3cd7-4589-b055-8c1fb1e60239", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54a15353-1fc4-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745358854, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745358854, "uuid": "0fc21898-a581-440b-a046-cbad616e8863", "comment": "Malware payload", "value": "ddedcdca327c0b42b4aeff751432af4f", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745358854, "uuid": "9eb0ae4b-e034-45e9-92ac-cfcd7923efe3", "comment": "Malware payload", "value": "fd614396b87bebc879f63273f7bd86336906f54a3976039fc30233ee9a3abcba", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745358854, "uuid": "af90b80c-9f4f-4a48-a2cf-5f1ae850c43f", "value": "T1C49533DC47B251E3E10E8535847B46894E3D93A95CCE888F4EBFAB2D50A1AB4F1794", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745358854, "uuid": "b49be375-7ce3-4d15-87d0-b0c41e3771ed", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745358854, "uuid": "fefc47c5-e332-4bf3-8c44-78370bfc6775", "value": "49152:EnMx7BavllyC5UQuNSmVG9luHvULcf1dZ8qgfCd:EMyLyC5duNSs1dSqUq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745358854, "uuid": "74481cc5-c956-40b1-92f1-346dae9be9f0", "value": 1900032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745358854, "uuid": "4045a3b0-8fb9-421b-84b6-17c357fd36f4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99eb6666-1fc4-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745358970, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745358970, "uuid": "d42205e0-8213-4ef1-a7a0-ee99000b6bd0", "comment": "Malware payload", "value": "22ca4ce72395b967a82f39412e0d6799", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745358970, "uuid": "6c6cb21d-b370-44bb-bfd1-fe66c778d006", "comment": "Malware payload", "value": "8f4ea3a63641b3c76813385f7a08f9ec4f2e97b1197d2d18b4c707836b854eae", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745358970, "uuid": "83a8a517-7286-42e8-bd00-ab8eef077a0a", "value": "T13B259E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745358970, "uuid": "bff07a1e-7e07-47a2-bb16-898ece90d167", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745358970, "uuid": "06eae0f5-962b-4446-9ae4-64fea28eb6e4", "value": "24576:qqDEvCTbMWu7rQYlBQcBiT6rprG8ar4U4:qTvC/MTQYxsWR7ar4U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745358970, "uuid": "78a5abc5-fd04-4f00-8a1a-8c8705462da7", "value": 969216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745358970, "uuid": "57ed3ac7-cbd5-4aed-92b5-64b91f4d6284", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa4b8f00-1fc4-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1745358997, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745358997, "uuid": "d883abfa-5e44-4684-86c8-600297490f06", "comment": "Malware payload (Amadey)", "value": "679cabe1d216060b235ebff41447b532", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745358997, "uuid": "007fa764-65c9-45f5-9ea8-da386b7ea275", "comment": "Malware payload (Amadey)", "value": "11cbacb785691e69c882f15e29d36cc5e859d9f30f9c329feca0a85c8ef4297e", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745358997, "uuid": "ca272f48-1623-4b5c-b6f8-bd5c2559d258", "value": "T121A53356BBD44072E8F65B305AF543C70B3A7E912A38C64B2209AE6D14B2075FD327", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745358997, "uuid": "05e0a53e-4307-4cf7-b104-fda916d50377", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745358997, "uuid": "0c95b8aa-5562-4b80-964b-9bdd8c56d802", "value": "49152:ZQIWq0DBRrnlBejhL7Ia7WheOg29yrgt9ZkcfNvtuw3m:XurDW9PiheONyrgmOvQw2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745358997, "uuid": "4290c088-981e-4073-b897-5832094a007e", "value": 2206720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745358997, "uuid": "505ee587-78ba-453e-a2c9-5dfc1a6eb376", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbab3570-1fc6-11f0-82df-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1745359993, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745359993, "uuid": "286f0cae-f6d5-45e0-bc18-4b1395fc7930", "comment": "Malware payload (Amadey)", "value": "0499646d07d9f02b1253f8c76ed2aa6c", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745359993, "uuid": "5295f019-389f-4480-9312-b6a174c2f7a2", "comment": "Malware payload (Amadey)", "value": "78a5316eb5b1ebe85cf8f9cdbe9c1d6bef7d3b0022b50eeacddbe484591f9ae2", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745359993, "uuid": "cbbdec45-b3c7-4762-8d4d-cb8c3db211ef", "value": "T143159E0273D1C062FFAB92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745359993, "uuid": "cb10fe12-a155-4f80-86b9-373498de60df", "value": "279daa640d9140f9842860a738abd363", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745359993, "uuid": "a7f59382-038e-4480-8d26-e513d10f6d74", "value": "24576:ZqDEvCTbMWu7rQYlBQcBiT6rprG8aeAV:ZTvC/MTQYxsWR7aeA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745359993, "uuid": "c1c09fb7-0b72-4856-96ac-fa7c67488c20", "value": 961024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745359993, "uuid": "a01e0469-e89c-43fa-92a4-f3d7be45b066", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdcda5db-1fc8-11f0-82df-82aee05be84a", "comment": "Malware payload (UACModuleSmokeLoader)", "timestamp": 1745360856, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745360856, "uuid": "f127b127-217e-48bc-8146-d9b2bec4b0da", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "1d4b9b7f66f7e2e35dedf5363b1f04e3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745360856, "uuid": "17d90ba1-fd6a-4e1b-91ac-3661d10f0a51", "comment": "Malware payload (UACModuleSmokeLoader)", "value": "30b76641c059254eec84584fe6640be78bf4cc205bb0dadf265043a7797b589e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "UACModuleSmokeLoader", "colour": "#305B1C", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745360856, "uuid": "1ea501f6-4baf-4210-ba51-f7a33f1f57b5", "value": "T128A53384C5FB2969E49D9D7DC0CFFBBB92E89D0270159903C4B4827B386916CE7583", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745360856, "uuid": "1a0ad99c-73e5-4f0c-b21e-17df9a7edf43", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745360856, "uuid": "abba7be3-d4e7-4ec5-9b67-0eca782c27d6", "value": "49152:DDDsaOXzG687au+LZADjD+HSwknWah5XKjg9S0Nh:DDgaOXihmvLZucQthZr9S0N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745360856, "uuid": "eac372fc-7186-4db0-9802-01d4aecd936d", "value": 2153472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745360856, "uuid": "dadcb3a0-2a4d-444e-9c8c-8aa606ae9677", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5675d91f-1fca-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745361434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745361434, "uuid": "da448993-a14b-4705-a45e-6b8b307a0e29", "comment": "Malware payload", "value": "d90ac235e97461248c2bc104b677f918", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745361434, "uuid": "bdd0e039-8a61-4294-abb5-cb76336b7e32", "comment": "Malware payload", "value": "2e36fa9ccc29f08063e1eed7101c9049c7007dbeb4904b33ea212b8e3abf3b36", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745361434, "uuid": "3922c5cf-0f06-4c3a-9d9a-aec79113ecf2", "value": "T1CC2633369A9EF966F6A608B047DFFB713A77136259430C008BB96E3678831D7907C7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745361434, "uuid": "0cc79a32-9ca3-48cd-83c0-d0e00b2af9d3", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745361434, "uuid": "ecb3561c-d3db-40b0-a384-8e2c52f96be6", "value": "98304:sJKaUZDHH80PDcQNX3zyfso0631Nxu613FAGNMnvSiSVUSj4Xq7j:s14Hc0PFnufso93PrZFLNAvSP0qv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745361434, "uuid": "d585e56b-b105-4e52-ad8b-06c717ad06a0", "value": 4581888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745361434, "uuid": "a3a7ae3e-ab30-448b-9775-b79fbfc43335", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e14196b-1fd2-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745364775, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745364775, "uuid": "b453689e-d1a1-4a48-a0ca-4b6b8a0bb137", "comment": "Malware payload", "value": "6cf2242242461136615651e4aadce534", "object_relation": "md5", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745364775, "uuid": "ee2f691b-dc66-410c-a426-4155f1a34406", "comment": "Malware payload", "value": "6be9d122af59b30e83e9ef181dffb2f6c3f50c3eb1a44a32b06d0556f82fc660", "object_relation": "sha256", "Tag": [ { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745364775, "uuid": "c9d450cc-de2b-4021-b341-d6dccae078f9", "value": "T1308533FEBEA5E7BAC8DD04FF982D540665589EA0632F44342717618C0872E2E1B1A9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745364775, "uuid": "c8f16447-23b0-4f6b-8e9c-db452ddd2e36", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745364775, "uuid": "4f4d9a43-d705-4f11-8362-72f4f8ca07ee", "value": "49152:QX1vI4g3J4bdxf8Ch6BWrQLISv12GsmeqDEh:QX1uerfzoscLIm2+eqDEh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745364775, "uuid": "35b738ae-a272-450d-a6af-e2c7a2739465", "value": 1820160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745364775, "uuid": "8bfb8dc8-7ec2-46bf-94a9-be884a308b16", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ca71184-1fd2-11f0-82df-82aee05be84a", "comment": "Malware payload (Healer)", "timestamp": 1745364826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745364826, "uuid": "5426a53e-8e71-4f0c-8ed1-e923a80705b4", "comment": "Malware payload (Healer)", "value": "49100d52b123418ac9c9a4014369e9dc", "object_relation": "md5", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745364826, "uuid": "7da519df-b1c0-4d7b-bbf8-07efcd287a36", "comment": "Malware payload (Healer)", "value": "f02fcf93b91502a63f7bad0f473784048d1c6e6e49ac5bc899534e444ce94e3d", "object_relation": "sha256", "Tag": [ { "name": "healer", "colour": "#118a4e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745364826, "uuid": "8fcdde4e-0f5d-42f4-873a-f7f1af330634", "value": "T1038533EEE8501D3DDDA50FFA93A7C754192A0CBD588EFE6A67F844F4DA01D021B21C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745364826, "uuid": "2e8ab0b4-d80e-4264-b079-184225df80f0", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745364826, "uuid": "25895989-8b48-438d-8fe8-7e0ed57102e8", "value": "49152:+gBxscmIYsZCJty1crwAJT9B0WCIv03ngq+haDKb:+ascmECJtAcNP0WCI2ngzamb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745364826, "uuid": "22f93992-4cde-451e-8238-226f3318f1b2", "value": 1775616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745364826, "uuid": "e1f7cb55-153a-40a2-8ae8-e5aad9c3980f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69bf9cbe-1fd3-11f0-82df-82aee05be84a", "comment": "Malware payload", "timestamp": 1745365332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745365332, "uuid": "085fc1a8-5469-4a1a-b869-cc767928bbca", "comment": "Malware payload", "value": "485b030474eda444e391b5c0af0b2a3b", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745365332, "uuid": "1a2eb717-632a-4f16-81ae-66bdce5fa2ef", "comment": "Malware payload", "value": "c4a09c3e1c56a4d86229bf8e0ec40cc895bba19104364a2d4c834bae3e59e7b9", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "redirect", "colour": "#71ba89", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745365332, "uuid": "ea6bfa68-7135-469f-bedd-0211bc2d1518", "value": "T1A153F97766623E0D9233480CB8C5B6C87718C453D4075AEDE9BAA62CC3CBDC691727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745365332, "uuid": "d52bb05d-db02-4ca4-b5f0-0a5f68515c93", "value": "768:aA1fho1SnvHgRNv+f5AfpUxnHeob4f1u0eJwO0H+UJF/dchR1X1t1RB1p+dSl2sm:aA1fho1P6n2ShR1X1t1RB1p+dSg1l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745365332, "uuid": "74bbfe4f-33e5-4914-b9d5-0b9258d9fca2", "value": 64434, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745365332, "uuid": "eeb13094-2d1c-41aa-bed4-8af2552e9d4d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0609676b-1fd4-11f0-82df-82aee05be84a", "comment": "Malware payload (CredentialFlusher)", "timestamp": 1745365594, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745365594, "uuid": "cdf97182-c729-4c4b-bbce-b5b9110423b5", "comment": "Malware payload (CredentialFlusher)", "value": "c16dafcc4f5d2aff63ce0c11911bac2b", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745365594, "uuid": "590b79af-6a61-4103-9762-ca1ae68fdc85", "comment": "Malware payload (CredentialFlusher)", "value": "ebdb501c9e73421a78ccbef4e15d292a39ad8d97a5cf329ffcf4ac269ac10108", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "lucifer", "colour": "#5f009c", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745365594, "uuid": "0c8b0672-da05-4d09-a751-06e9f3fdce20", "value": "T1C9A533A2B6ED1434D8A503B12CFB068356367D51EB69A317234F6C6E0C723713275B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1745365594, "uuid": "06700236-a38c-4355-8980-dcf34504e513", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745365594, "uuid": "f44973ba-7e93-471e-bc50-17e5e0a86827", "value": "49152:hxIWq+lnjY1nXOEe4osmmVIKcRjhOniYSaTOlh19CQpUi:IAlns5B3qJPhOipaTO/1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745365594, "uuid": "bb8bbf50-12b7-4985-b267-f0edb4c32b70", "value": 2127872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1745365594, "uuid": "18adb403-d44a-41ce-a557-53e3b99920c8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1745366165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1745366165, "uuid": "905ae45c-bfe3-4f4b-a40c-c3d6f1333236", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1745366165, "uuid": "64030550-5e29-468c-96ac-470b77ab14e5", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1745366165, "uuid": "e3d517eb-2b5a-44b0-840a-8a363bfe764c", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1745366165, "uuid": "16967360-a809-4ad5-940d-8d26a3f708f0", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1745366165, "uuid": "d78229c1-5a32-4b7d-be1b-968760d56a35", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280124, "uuid": "06556873-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.162.138:60658/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280184, "uuid": "2a0cc44d-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.196.11.202:48421/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280185, "uuid": "2a87d3a6-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.240.12:57195/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280189, "uuid": "2d051950-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.32.111:43532/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280191, "uuid": "2dd1e946-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.5.0.174:38460/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280213, "uuid": "3ae0e05f-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.1.122:44943/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280213, "uuid": "3b09b3dc-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.98.79.123:56116/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280213, "uuid": "3b0b5ce6-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.69.71:45928/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280213, "uuid": "3b18740b-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.98.82.170:56116/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280213, "uuid": "3b511806-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.3.154:53016/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280251, "uuid": "51b29c32-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.207.124.206:39304/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280251, "uuid": "51d29f43-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.173.238:45031/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280263, "uuid": "58bf0cdd-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.103.239:39766/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280272, "uuid": "5e7f59c7-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.166.59.96:42412/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280273, "uuid": "5e8fcb91-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.50.111:47843/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280273, "uuid": "5eb0777d-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.204.142:39940/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280273, "uuid": "5eb16ea1-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.101.63:39824/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280273, "uuid": "5eb16f05-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.10.159.34:52361/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280273, "uuid": "5eb382df-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.24.234:33536/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280273, "uuid": "5eb3d993-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.98.5.180:46504/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280289, "uuid": "68891b2f-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.113.33:60616/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280426, "uuid": "b9eeec4b-1f0d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://76.72.238.153:41771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280606, "uuid": "25402185-1f0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.236.75:50365/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280741, "uuid": "75c020f1-1f0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.60.92:52686/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745280965, "uuid": "fb51b064-1f0e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.77.227:50635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745281224, "uuid": "95ed615e-1f0f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.26.24:41162/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745281505, "uuid": "3d028380-1f10-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.60.92:52686/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745281506, "uuid": "3dfdd6cf-1f10-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.91.173:51856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745281747, "uuid": "cd4d9dbb-1f10-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://76.72.238.153:41771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745281865, "uuid": "13d23fc7-1f11-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.212.178:47427/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745282285, "uuid": "0e620d39-1f12-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.electivewielder.digital/xpr6q4x8kh.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745282345, "uuid": "31ff29c0-1f12-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.177.121:48937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745282434, "uuid": "66bb128d-1f12-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.247:48065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745282464, "uuid": "78f71f4b-1f12-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.7.200:38852/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745282885, "uuid": "73d9454d-1f13-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.19.139:53797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745282946, "uuid": "97fbfe24-1f13-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.115.72:48564/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745283005, "uuid": "bb42f734-1f13-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.66.188:51315/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745283005, "uuid": "bb641a78-1f13-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.143.9:54675/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745283186, "uuid": "2710ef8d-1f14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.212.178:47427/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745283365, "uuid": "91d9be72-1f14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.249.98:55382/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745283425, "uuid": "b5c51002-1f14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.93.77:42579/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745283486, "uuid": "d9bc287f-1f14-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.216.236.192:45870/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745283606, "uuid": "219e9e2d-1f15-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.22.64.142:34879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745283965, "uuid": "f74f0b7a-1f15-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.19.139:53797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745284025, "uuid": "1afe96e1-1f16-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.143.9:54675/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745284145, "uuid": "62db9441-1f16-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.175.57:51279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745284207, "uuid": "87a3f659-1f16-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.216.52:38098/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745284324, "uuid": "cd7e0f6b-1f16-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.115.72:48564/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745284506, "uuid": "39dcfb40-1f17-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.204.160:57579/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745284686, "uuid": "a4ee2950-1f17-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.66.188:51315/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745284746, "uuid": "c8e9c0d4-1f17-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.34.158:44013/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745285164, "uuid": "c1f5068c-1f18-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.10.9:46952/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745285225, "uuid": "e6409ea8-1f18-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.104.106:59919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745285225, "uuid": "e65f460f-1f18-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.100.149:33741/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745285344, "uuid": "2d5cdc16-1f19-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.175.57:51279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745285465, "uuid": "75a806f9-1f19-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.10.9:46952/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745285526, "uuid": "999f6ca1-1f19-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.123.147:33864/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745285886, "uuid": "70355840-1f1a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.electivewielder.digital/y8d4zpo1nk.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745286124, "uuid": "fe6750e8-1f1a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.210.99:60466/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745286185, "uuid": "22c0c098-1f1b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.15.182:40291/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745286186, "uuid": "236e3c61-1f1b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.204.160:57579/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745286365, "uuid": "8dd582dd-1f1b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.58.159:35895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745286433, "uuid": "b66fa7c3-1f1b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.3.133.225:57713/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745286514, "uuid": "e6f2e371-1f1b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.234.223:55117/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745286726, "uuid": "64f452a0-1f1c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.191.183:60394/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745286906, "uuid": "d060edfb-1f1c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.34.158:44013/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745287025, "uuid": "177e1836-1f1d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.123.147:33864/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745287145, "uuid": "5ee4b3d2-1f1d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.146.148:54983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745287208, "uuid": "84313ef4-1f1d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.216.52:38098/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745287684, "uuid": "a05ec0f7-1f1e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.100.149:33741/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745287745, "uuid": "c4a7fe99-1f1e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.127.7.163/bins/sora.x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745288045, "uuid": "7763efba-1f1f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.15.182:40291/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745288047, "uuid": "789bd84e-1f1f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.191.183:60394/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745288285, "uuid": "064d5639-1f20-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.235.1:49844/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745288467, "uuid": "72ee96f4-1f20-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.169.65:56199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745288826, "uuid": "48d18336-1f21-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.237.35:43097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745288885, "uuid": "6c2a108c-1f21-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.245.8:56948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745289066, "uuid": "d81ab8fa-1f21-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.86.106.161:46331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745289125, "uuid": "fb38bdc5-1f21-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.131.221:34038/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745289126, "uuid": "fb8e8baa-1f21-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.128.37:54522/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745289143, "uuid": "05d14721-1f22-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.155:44801/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745289306, "uuid": "66c92e44-1f22-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.125.185:38914/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745289485, "uuid": "d164d660-1f22-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.electivewielder.digital/o32xzgezdo.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745289669, "uuid": "3f5ee726-1f23-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.46.84.234:37927/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745289907, "uuid": "ccfc7f8b-1f23-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.137.193:36006/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745290026, "uuid": "141ab085-1f24-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.169.65:56199/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745290385, "uuid": "e9e71440-1f24-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.237.35:43097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745290385, "uuid": "ea3e9ad5-1f24-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.245.8:56948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745290745, "uuid": "c067174b-1f25-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.128.37:54522/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745290864, "uuid": "0764c058-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.200.154.119/bin/bins.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745290864, "uuid": "078eb09c-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.106.66.149/Sakura.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745290864, "uuid": "07b0a902-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.86.106.161:46331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291013, "uuid": "6047f972-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.68.224:52512/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291045, "uuid": "73b1860b-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.121.73.134:34989/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291047, "uuid": "74d7b309-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.252.188:47928/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291064, "uuid": "7ee99acc-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.169.217:56381/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291065, "uuid": "7f9dea8a-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.60.242:57396/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291073, "uuid": "8425fe67-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.210.101.174:49242/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291073, "uuid": "84260121-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://99.70.111.58:49824/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291073, "uuid": "842b3b63-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.207:11098/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291073, "uuid": "842dceb9-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.177.136:11023/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291073, "uuid": "84407407-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.98.80.65:51703/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291073, "uuid": "844583a6-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.98.41.233:38422/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291073, "uuid": "844c782a-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.98.39.150:39637/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291073, "uuid": "8452044b-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.135.149:35499/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291073, "uuid": "845fa7f0-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.12.211:39983/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291073, "uuid": "8474faae-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.181.64.179:37395/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291074, "uuid": "84761ca1-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.199.205.174:40643/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291074, "uuid": "84abc5bb-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.158.171.222:44828/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291082, "uuid": "8976f277-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.1.79:33402/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291226, "uuid": "df2afaec-1f26-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.46.84.234:37927/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291285, "uuid": "0241b55c-1f27-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.137.193:36006/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291406, "uuid": "4aae8ba9-1f27-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.244.185:56788/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291645, "uuid": "d9332828-1f27-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.220.56:46657/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291706, "uuid": "fd9dd530-1f27-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.22.186:35983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291765, "uuid": "2095724f-1f28-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.1.16:54886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745291946, "uuid": "8c4f05e6-1f28-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.79.76:55656/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745292005, "uuid": "afcd02f9-1f28-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://199.16.59.198:42575/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745292306, "uuid": "62e62765-1f29-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.244.212:50961/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745292306, "uuid": "63012fef-1f29-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.33.127:34022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745292607, "uuid": "16a82601-1f2a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.16.24:39947/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745292666, "uuid": "39a879dc-1f2a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.51.250:49013/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745292845, "uuid": "a453b20a-1f2a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.164.117:36149/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745293083, "uuid": "32267c7d-1f2b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.electivewielder.digital/wo9c5skfmr.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745293085, "uuid": "3373e978-1f2b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.22.186:35983/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745293145, "uuid": "56ffc4fd-1f2b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.79.76:55656/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745293145, "uuid": "5729ff6e-1f2b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.122.207:57910/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745293445, "uuid": "09d850dd-1f2c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://199.16.59.198:42575/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745293505, "uuid": "2da76f62-1f2c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.134.132.196:57447/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745293685, "uuid": "9938385b-1f2c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.40.55:38926/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745293805, "uuid": "e09d94b9-1f2c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.232.112:53849/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745294345, "uuid": "229a375e-1f2e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.215.67:36026/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745294345, "uuid": "22b478c9-1f2e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.147.37:58123/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745294406, "uuid": "46c3dee2-1f2e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.16.24:39947/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745294464, "uuid": "693cb0f3-1f2e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.242.48.116:48028/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745294585, "uuid": "b1b64366-1f2e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.14.140:53048/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745294601, "uuid": "badad7e4-1f2e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.31.204:48631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745294644, "uuid": "d4bfd7a2-1f2e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.134.132.196:57447/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745294673, "uuid": "e5fc9e3a-1f2e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.14.142:34158/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745294775, "uuid": "22ad1ccd-1f2f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.40.55:38926/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745294885, "uuid": "63ff141a-1f2f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.82.142:50291/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745294944, "uuid": "87b8fed2-1f2f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.154:41924/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745294945, "uuid": "87ca5f07-1f2f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.151.234:52105/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745294945, "uuid": "882cce6b-1f2f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.121.152:59782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745295142, "uuid": "fd87ec85-1f2f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.74.140:58752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745295486, "uuid": "cab90ed9-1f30-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.71.204:34196/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745295605, "uuid": "119107b7-1f31-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.33.127:34022/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745295724, "uuid": "585a3e81-1f31-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.151.148:59497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745295725, "uuid": "5925aea5-1f31-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.202.220:56065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745295905, "uuid": "c436b4a8-1f31-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.121.152:59782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745296144, "uuid": "52b18d6f-1f32-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.242.48.116:48028/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745296144, "uuid": "52d88a0b-1f32-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.82.142:50291/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745296162, "uuid": "5dae8ed4-1f32-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.247.82.29:45223/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745296325, "uuid": "be8fb353-1f32-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.151.234:52105/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745296326, "uuid": "bf0dc959-1f32-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.40.64:41279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745296386, "uuid": "e2c1ae43-1f32-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.200.148:57202/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745296386, "uuid": "e2f7a354-1f32-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.92.240.168:60601/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745296685, "uuid": "95125951-1f33-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.71.204:34196/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745296686, "uuid": "9585ab8f-1f33-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.electivewielder.digital/mbyi5l7mt4.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745296688, "uuid": "9724d3e2-1f33-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.154:41924/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745296692, "uuid": "999c7848-1f33-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.96.223:48791/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745296864, "uuid": "ffa5f2ff-1f33-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.133.53:53845/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745296865, "uuid": "0093faa7-1f34-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.243.128.14:52293/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745296927, "uuid": "2583a592-1f34-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.121.141:54669/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745297285, "uuid": "fa9a7ab5-1f34-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.200.148:57202/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745297528, "uuid": "8bd0c500-1f35-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.92.240.168:60601/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745297763, "uuid": "17d84c5f-1f36-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.40.64:41279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745298007, "uuid": "a94f9d50-1f36-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.135.98:59792/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745298118, "uuid": "eb1a3cf6-1f36-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.133.53:53845/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745298118, "uuid": "eb1c8601-1f36-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.174.134:52185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745298185, "uuid": "13359e8a-1f37-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.202.220:56065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745298364, "uuid": "7e217014-1f37-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.243.69.230:42236/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745298485, "uuid": "c65012ad-1f37-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.5.233:43062/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745298563, "uuid": "f4900a44-1f37-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.98.162:35859/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745298665, "uuid": "317eed23-1f38-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.222.52:45200/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745298786, "uuid": "792f0153-1f38-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.75.155:47609/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745298847, "uuid": "9dcc4f54-1f38-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.242.76.187:48564/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745298975, "uuid": "e9f8aaad-1f38-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.5.145:58218/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299207, "uuid": "7421d02b-1f39-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.191.231.12:41331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299324, "uuid": "ba64fbe6-1f39-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.81.101:57225/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299446, "uuid": "029e0692-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.51.147.183/Sakura.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299504, "uuid": "2539c696-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://wsec.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299504, "uuid": "25756a54-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://webhook.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299505, "uuid": "25df692b-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://reports.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299505, "uuid": "25eff2e6-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://92.118.59.44/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "274ada84-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://nc-sec.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "274ae368-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://rsec.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "274ae612-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://zliong.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "274ae95c-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://zen-doc.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "274b4962-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://apolog.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "2750f116-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://center.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "275f25f8-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://jrdevil.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "27688123-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://hn-sec.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "276b667e-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vcloud.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "276bbb96-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://kimkom.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "276d5b23-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.51.147.183/ntp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "27702fbc-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://app.ratoscreenco.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "277156e0-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.ratoscreenco.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "27740882-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://nbsec.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299507, "uuid": "27768886-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://fn-dev.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299508, "uuid": "278cbf1e-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.242.76.187:48564/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299508, "uuid": "278f58ef-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://account.ratoscreenco.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299508, "uuid": "27b518d0-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://dcontrol.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299508, "uuid": "27c0cde1-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://62.60.226.251/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299508, "uuid": "27e2d64d-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.160/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299508, "uuid": "28100049-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.205/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299509, "uuid": "283ecf5d-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.200/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299509, "uuid": "28702dd3-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://62.60.226.253/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299509, "uuid": "28a0b4f2-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://tm-supp.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299510, "uuid": "28d95364-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://itsec.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299510, "uuid": "28dfd057-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://soc.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299510, "uuid": "28ebe0c3-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://wizzord.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299510, "uuid": "2905bcdf-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://doc-ads.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299510, "uuid": "2920746c-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://62.60.226.249/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "2953f7cc-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://sic.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "296630ee-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://news.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "296b9d57-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://baasmm.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "29769810-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.169/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "2999641d-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://kemoni.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "299d91ac-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://admin.ratoscreenco.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "299db998-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://skully.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "29ab75af-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://anse.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "29d07fba-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://isec.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299511, "uuid": "29e5cbd6-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cstor.nn2.ru/userfiles/data/ufiles/2015-12/c7/03/a0/565f2346bc91c_otchetopnrsistemyotopleniia.pdf", "Tag": [ { "name": "Badur", "colour": "#f1b8c2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299512, "uuid": "2a1fae52-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://standup.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299515, "uuid": "2bd5db36-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://make-dd.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299515, "uuid": "2c05d42d-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://62.60.226.243/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299516, "uuid": "2c5b031a-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://osfix.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299518, "uuid": "2e11cc23-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://fsec.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299533, "uuid": "3702f59c-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://62.60.226.248/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299534, "uuid": "3712a58b-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloud.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299534, "uuid": "371d2676-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://rev.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299534, "uuid": "37244a5e-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://assets.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299534, "uuid": "3724bdae-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://df-sec.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299534, "uuid": "3724be98-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://support.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299534, "uuid": "372ca95f-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://zsec.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299534, "uuid": "372cacbf-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://pac.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299534, "uuid": "372d49fd-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://sec-ans.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299534, "uuid": "373378c4-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://prof.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299534, "uuid": "374356d4-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vbsec.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299534, "uuid": "3768b87a-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://zdecode.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299536, "uuid": "38406474-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://olsec.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299538, "uuid": "3965a772-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://jtsec.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299538, "uuid": "396652bc-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://nj-sec.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299538, "uuid": "396f6e59-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://services.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299538, "uuid": "397bc63d-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://den-aus2.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299538, "uuid": "398d0fdc-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev-ns.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299538, "uuid": "3992a8b7-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vtsec.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299538, "uuid": "39aa8cfc-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://hunter.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299539, "uuid": "3a017d5e-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://help.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299566, "uuid": "4a22f599-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.169/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299566, "uuid": "4a634717-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://62.60.226.253/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299566, "uuid": "4a672f1e-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.205/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299566, "uuid": "4a855aa2-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://reg.innocreed.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299566, "uuid": "4a993b3f-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.160/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299566, "uuid": "4aa7ebfc-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.81.23.54////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "4ab2c584-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.81.23.57////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "4ac52842-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://secure.ratoscreenco.com/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "4ae99404-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.190/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "4b172074-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.200/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "4b1ed8f3-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.168/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "4b2ed364-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.161/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "4b384ec4-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.190/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "4b38aa14-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://62.60.226.244/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "4b3a24e1-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.173/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299567, "uuid": "4b3a2d36-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.168/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4b49601a-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.173/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4b67df74-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.218/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4b6e07b0-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://62.60.226.243/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4b7292a6-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://62.60.226.248/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4b7cabc9-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.212/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4b7d0c64-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.138/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4b86f215-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://154.53.44.14/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4b8ddad5-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://62.60.226.244/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4b8ee8c6-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.236/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4b950047-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.214/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4b9a7a56-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.212/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4ba079d4-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.166/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4ba08163-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.138/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4ba8c2a0-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.81.23.58////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4bc3c672-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.166/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4bccd8b6-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.228/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4bd0bd8d-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.183/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4bd47113-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.185/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299568, "uuid": "4bdd7719-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.228/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299569, "uuid": "4be3400c-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.232/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299569, "uuid": "4be48b38-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.225/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299569, "uuid": "4be48b6e-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.207/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299569, "uuid": "4bfcc0f9-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.81.23.56////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299569, "uuid": "4bfea905-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.223/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299569, "uuid": "4c1b1875-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.223/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299570, "uuid": "4c805159-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.81.23.14////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299570, "uuid": "4cad9ef2-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://62.60.226.249/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299570, "uuid": "4ceae37a-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.199/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299570, "uuid": "4ced5a8d-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.180/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299572, "uuid": "4e109baf-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.207/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299575, "uuid": "4f859f93-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.236/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299576, "uuid": "50991419-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.218/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299576, "uuid": "50a04496-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://62.60.226.251/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299577, "uuid": "50dc1fc5-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.185/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299577, "uuid": "50de8053-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.214/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299577, "uuid": "50e22b1c-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.183/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299577, "uuid": "50f8b05d-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.199/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299577, "uuid": "511729ae-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.161/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299578, "uuid": "514d3283-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.180/////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299578, "uuid": "51710d89-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.225/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299578, "uuid": "51870825-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://107.150.0.232/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299588, "uuid": "57c35b6b-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.183.45:47980/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299623, "uuid": "6c5a12b5-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev.gandizon.com/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299623, "uuid": "6c8cc7a3-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn-mehj-assets.s3.pl-waw.scw.cloud/truck-trails.html", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299626, "uuid": "6e3599c0-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://gga.gandizon.com/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299626, "uuid": "6e509fbc-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://control.gandizon.com/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "6e9db6e6-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://alert.gandizon.com/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "6ea3376b-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://full.gandizon.com/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "6ec769d3-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://jsec.gandizon.com/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "6eca683d-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://docs.gandizon.com/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "6ed14ad2-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloud.gandizon.com/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "6ed958ae-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://k-dev.gandizon.com/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "6edb1a44-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://stuff.gandizon.com/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "6efbc167-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://sec.gandizon.com/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299627, "uuid": "6f016dd8-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://roast.gandizon.com/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299628, "uuid": "6f0d747a-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://canv.gandizon.com/bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299629, "uuid": "6fee2001-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://bookinterpagecen.com/", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299684, "uuid": "90dc70e1-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://reports.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299686, "uuid": "91fcdabd-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://baasmm.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299686, "uuid": "9200ebc7-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://isec.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299686, "uuid": "9200ed18-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://nbsec.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299686, "uuid": "92164bc8-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://reg.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299686, "uuid": "92164ca9-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://zliong.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299686, "uuid": "921c87e8-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://wizzord.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299686, "uuid": "92262c24-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vcloud.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299686, "uuid": "9232226e-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://jrdevil.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299687, "uuid": "923557ab-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://nc-sec.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299687, "uuid": "923e7176-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://standup.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299687, "uuid": "923f0722-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://doc-ads.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299687, "uuid": "9243a1d0-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://center.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299687, "uuid": "9246e536-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://anse.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299687, "uuid": "92470293-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://soc.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299687, "uuid": "92498464-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://hn-sec.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299687, "uuid": "924b2027-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://skully.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299687, "uuid": "924c06e3-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://sic.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299687, "uuid": "924cdcaf-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://webhook.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299687, "uuid": "924e67fe-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://tm-supp.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299687, "uuid": "924e8ebe-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://dcontrol.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299687, "uuid": "92543774-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://rsec.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299688, "uuid": "92eb2581-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://news.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299688, "uuid": "92ecd072-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://wsec.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299688, "uuid": "92efe7a7-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://zen-doc.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299688, "uuid": "92efe903-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://itsec.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299688, "uuid": "931d92ff-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://fn-dev.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299688, "uuid": "93476322-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://osfix.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299689, "uuid": "939b7720-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://services.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299689, "uuid": "93cecf54-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://pv-sq.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299689, "uuid": "93debf93-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://apolog.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299689, "uuid": "93e49f06-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://kemoni.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299690, "uuid": "9405ec47-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://kimkom.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299693, "uuid": "95df3f88-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://assets.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299693, "uuid": "965a3faf-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://fsec.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299700, "uuid": "9a8477ce-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://support.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299713, "uuid": "a242656b-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://rev.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299714, "uuid": "a24f2b8b-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://hunter.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299714, "uuid": "a2500d86-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://pac.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299714, "uuid": "a250586a-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://zdecode.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299714, "uuid": "a252321f-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://nj-sec.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299714, "uuid": "a2525937-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://help.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299714, "uuid": "a25905bb-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://sec-ans.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299714, "uuid": "a259c4d8-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vtsec.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299714, "uuid": "a25a4cfe-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://make-dd.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299714, "uuid": "a25b8fd9-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://prof.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299714, "uuid": "a25d8c0a-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://olsec.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299714, "uuid": "a277bf07-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://den-aus2.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299714, "uuid": "a27a1562-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloud.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299717, "uuid": "a438936b-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vbsec.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299717, "uuid": "a43d3694-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://zsec.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299717, "uuid": "a4433cc1-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://jtsec.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299718, "uuid": "a4d560ce-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://df-sec.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299718, "uuid": "a4e1f939-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev-ns.innocreed.com////bin/support.client.exe?i=&e=Support&y=Guest&r=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299744, "uuid": "b4b39110-1f3a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.38.106.89:41068/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745299985, "uuid": "43d9284e-1f3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.75.155:47609/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300044, "uuid": "66ff7d62-1f3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.41/files/151334531/pfH7pwc.msi", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300045, "uuid": "67e9a718-1f3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.41/files/1058602646/HeDEMmf.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300046, "uuid": "687996ec-1f3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.41/files/1401316133/zPXcqIt.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300046, "uuid": "68c3bd84-1f3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.41/files/6957769607/iiybdCt.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300047, "uuid": "68d2cd08-1f3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.41/files/5494432675/BZ1M8AV.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300047, "uuid": "68f45399-1f3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.41/files/5804781818/eZp5zCz.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "lockbit", "colour": "#c3baff", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300047, "uuid": "6928c59b-1f3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.41/files/qqdoup/random.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300048, "uuid": "697a35f1-1f3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.41/files/688795465/dhDtKXL.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300105, "uuid": "8bdf48c3-1f3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.5.145:58218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300164, "uuid": "aee16900-1f3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.51.250:49013/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300224, "uuid": "d288c39f-1f3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.222.52:45200/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300224, "uuid": "d2d6b2fb-1f3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.2.252:56031/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300283, "uuid": "f5c3332e-1f3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.17.70/zgrnf/nums.vbs", "Tag": [ { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300284, "uuid": "f6972221-1f3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.17.70/zgrnf/pik.ps1", "Tag": [ { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300286, "uuid": "f76ed3ff-1f3b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.232.12.140:48227/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300324, "uuid": "0e5d6168-1f3c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.electivewielder.digital/h2nb73cb3v.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300525, "uuid": "85e72c02-1f3c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.3.152:50178/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300828, "uuid": "3ad9daa2-1f3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.182.193:44605/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300945, "uuid": "8061aef1-1f3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.135.98:59792/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745300945, "uuid": "8069d33e-1f3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.16.79:41045/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301065, "uuid": "c7d4370b-1f3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.35:37261/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301065, "uuid": "c7f2a0d7-1f3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/ohshit.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301065, "uuid": "c7f2bf99-1f3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301065, "uuid": "c80ef557-1f3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/hiddenbin/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301065, "uuid": "c81135e8-1f3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301065, "uuid": "c820226c-1f3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301066, "uuid": "c82ae3f5-1f3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301066, "uuid": "c82b9fd6-1f3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/hiddenbin/boatnet.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301066, "uuid": "c82f14a7-1f3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301066, "uuid": "c89ba32c-1f3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301066, "uuid": "c8b80f0d-1f3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301066, "uuid": "c8bdced5-1f3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301067, "uuid": "c8e355f0-1f3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301125, "uuid": "eb7a1308-1f3d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.142.122/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301248, "uuid": "35084cbe-1f3e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.131.104:58137/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301367, "uuid": "7c0e25c1-1f3e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.239.219:58343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301424, "uuid": "9e1f6063-1f3e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.207.75/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301425, "uuid": "9e3b3c76-1f3e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.207.75/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301425, "uuid": "9e5ffc67-1f3e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.242.202:35520/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301425, "uuid": "9e710914-1f3e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.78.34:44320/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301483, "uuid": "c0e692da-1f3e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.207.75/curl.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301483, "uuid": "c0e7471a-1f3e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.207.75/ftpget.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301483, "uuid": "c0e7a14b-1f3e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.207.75/tftp.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301484, "uuid": "c1ca4d84-1f3e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.207.75/massload", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301545, "uuid": "e5c00a24-1f3e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.207.75/wget.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "99c89de8-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/realtek", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "99ced6db-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/zte", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "99d2a902-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/thinkphp", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "99dc14db-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/bins/sora.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "99e8d4a5-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/bin", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "99ea2054-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/gpon443", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "9a05f81f-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/pay", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "9a06f62a-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/zyxel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "9a0d0896-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "9a10af37-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "9a1c7ee4-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.65.240:60707/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "9a1d6129-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "9a25d826-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "9a26c526-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/pulse", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "9a286e62-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "9a3caccd-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/sora.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301847, "uuid": "9a3d0ab2-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/bins/sora.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "9a473c33-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/hnap", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "9a479333-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/jaws", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "9a4c6b17-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "9a56ccd2-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/yarn", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "9a5dab71-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/goahead", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "9a5efd47-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/lg", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "9a695ad3-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/huawei", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "9a8fcca3-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301848, "uuid": "9a955d03-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301849, "uuid": "9aec09eb-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/aws", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301873, "uuid": "a93d7cb4-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://98.96.40.216:46698/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301873, "uuid": "a96550ea-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.112.185:49189/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301873, "uuid": "a971a574-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.98.38.207:38300/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301905, "uuid": "bccee5da-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/bins/sora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301906, "uuid": "bce8aecd-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.224.47/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745301913, "uuid": "c174f419-1f3f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.35:37261/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302025, "uuid": "04306dae-1f40-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.183.45:47980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302026, "uuid": "04c385a9-1f40-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.247.69:39902/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302084, "uuid": "27555aa5-1f40-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.3.152:50178/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302266, "uuid": "93760687-1f40-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.197.6:41031/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302445, "uuid": "fe73c529-1f40-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.182.193:44605/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302446, "uuid": "fec05842-1f40-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://raw.intenseproxy.zip/no_killer/Aqua.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302446, "uuid": "fedc619d-1f40-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://raw.intenseproxy.zip/no_killer/Aqua.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302446, "uuid": "feee538c-1f40-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://raw.intenseproxy.zip/no_killer/Aqua.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302446, "uuid": "ff03f748-1f40-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://raw.intenseproxy.zip/Aqua.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302446, "uuid": "ff1150af-1f40-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://raw.intenseproxy.zip/Aqua.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302447, "uuid": "ff689f33-1f40-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://raw.intenseproxy.zip/Aqua.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302447, "uuid": "ff7e757a-1f40-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://raw.intenseproxy.zip/Aqua.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302447, "uuid": "ff951d08-1f40-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://raw.intenseproxy.zip/Aqua.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302447, "uuid": "ff9c5b3e-1f40-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://raw.intenseproxy.zip/no_killer/Aqua.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302505, "uuid": "222e3982-1f41-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.239.219:58343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302505, "uuid": "2259fc9f-1f41-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://raw.intenseproxy.zip/Aqua.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302505, "uuid": "225c9e2f-1f41-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://raw.intenseproxy.zip/Aqua.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302505, "uuid": "225c9e39-1f41-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://raw.intenseproxy.zip/no_killer/Aqua.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302505, "uuid": "226e2112-1f41-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://raw.intenseproxy.zip/Aqua.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302506, "uuid": "2284fbf5-1f41-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://raw.intenseproxy.zip/Aqua.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302506, "uuid": "229e8d2e-1f41-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://raw.intenseproxy.zip/Aqua.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302507, "uuid": "232276a3-1f41-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://raw.intenseproxy.zip/Aqua.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302507, "uuid": "23533543-1f41-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://raw.intenseproxy.zip/Aqua.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302507, "uuid": "236b0e8c-1f41-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://raw.intenseproxy.zip/Aqua.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302509, "uuid": "245d016d-1f41-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://raw.intenseproxy.zip/no_killer/Aqua.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745302566, "uuid": "465db225-1f41-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://raw.intenseproxy.zip/Aqua.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745303164, "uuid": "ab3fec95-1f42-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.174.6:52082/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745303198, "uuid": "bf6f49fc-1f42-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.61.121.82:45609/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745303224, "uuid": "ceddab89-1f42-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.127.84:46577/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745303254, "uuid": "e0d40340-1f42-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.78.34:44320/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745303464, "uuid": "5d99fb69-1f43-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.247.69:39902/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745303644, "uuid": "c92860a4-1f43-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.197.6:41031/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745303704, "uuid": "ecff1826-1f43-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://164.163.25.141:55912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745303825, "uuid": "34c59204-1f44-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.49.117:32845/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745303839, "uuid": "3d669532-1f44-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.124.16:58455/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745303885, "uuid": "58a3f4a5-1f44-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.electivewielder.digital/a0qydj9kd0.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745304064, "uuid": "c39fddf6-1f44-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.74.13.175:15635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745304128, "uuid": "e99afa83-1f44-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.37.89:55013/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745304185, "uuid": "0b95f903-1f45-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.250.69:52836/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745304934, "uuid": "c9c90687-1f46-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.205.208:55853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745305301, "uuid": "a4d5a337-1f47-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.161.209:53950/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745305304, "uuid": "a6882951-1f47-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.131.104:58137/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745305355, "uuid": "c4acf157-1f47-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.169.99.86:55359/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745305685, "uuid": "8994a1a9-1f48-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.49.117:32845/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745305685, "uuid": "89a50488-1f48-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.127.84:46577/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745305685, "uuid": "89cae067-1f48-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.255.139.203:45439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745305686, "uuid": "89ff6ea9-1f48-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.255.139.203:45439/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745305686, "uuid": "8a02386b-1f48-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.124.16:58455/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745305686, "uuid": "8a64277c-1f48-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.91.161.209:53950/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745305687, "uuid": "8a9244fd-1f48-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.59.109.181:55060/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745305689, "uuid": "8bb37132-1f48-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.115.189:40863/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745305701, "uuid": "933e2bdb-1f48-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.252.31:52784/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745305745, "uuid": "ad2b1e14-1f48-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.134.91:42618/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745305806, "uuid": "d1a1e505-1f48-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.134.91:42618/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745305865, "uuid": "f49cef9e-1f48-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.93.125:50630/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745306164, "uuid": "a6e84c08-1f49-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.191.209:50909/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745306165, "uuid": "a7baffb0-1f49-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.169.99.86:55359/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745306284, "uuid": "eeae924d-1f49-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.250.69:52836/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745306464, "uuid": "59a0ace0-1f4a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.85.61:58577/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745306590, "uuid": "a5185ab8-1f4a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.155.234:47847/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745306764, "uuid": "0ce36697-1f4b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.252.31:52784/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745306886, "uuid": "55884a46-1f4b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.59.109.181:55060/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745307064, "uuid": "bf81ce63-1f4b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.59.31:43686/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745307064, "uuid": "bfb2a379-1f4b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.235.1:49844/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745307245, "uuid": "2b2f8b24-1f4c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/3e4ab3f83f4a4f09a53d0f2b390d3470.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745307304, "uuid": "4ead2e6c-1f4c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/40b9327d1599486cb928d9d8654f8667.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745307305, "uuid": "4f2b9b37-1f4c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.125.185:38914/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745307363, "uuid": "71f1cd01-1f4c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.191.209:50909/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745307489, "uuid": "bc9f58eb-1f4c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.electivewielder.digital/1nle718udo.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745307544, "uuid": "dd7d0bc8-1f4c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/b2e2a6b1a50a4c4b8edbdea994bd6272.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745307545, "uuid": "de14d128-1f4c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.93.125:50630/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745307726, "uuid": "49ed3486-1f4d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.218.59.189:32791/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745307784, "uuid": "6ce5c037-1f4d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.2.252:56031/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745307785, "uuid": "6d010297-1f4d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.74.13.175:15635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745307844, "uuid": "9046348c-1f4d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/236037287d3c4d26ba96c673d218ed3a.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745308144, "uuid": "432e5f4d-1f4e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/fde187bff75e4f638331d5a31ef7d02f.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745308413, "uuid": "e352d892-1f4e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.214.81:59815/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745308443, "uuid": "f5a5b33f-1f4e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/114a29f9f7a842b5b84186e3c2292ae7.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745308506, "uuid": "1b1f7a73-1f4f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.59.31:43686/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745308805, "uuid": "cd131800-1f4f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/299e72298c8e462fb30339042e77cee4.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745308927, "uuid": "15dc8ad3-1f50-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.174.239:57389/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745308985, "uuid": "3894deff-1f50-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.156.238.47:38733/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745309060, "uuid": "65401933-1f50-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.87.182:48864/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745309104, "uuid": "7f47f6d1-1f50-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/a42d276ab20042639e8951b1917280a8.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745309286, "uuid": "ebf086ab-1f50-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.21.167:47093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745309345, "uuid": "0f60d220-1f51-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.247:45917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745309404, "uuid": "3252e4bf-1f51-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/d97d565e94b14ca09d6a59746c65928b.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745309465, "uuid": "56b8ccdf-1f51-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.220.24:50232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745309705, "uuid": "e5c676b0-1f51-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.224:45536/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745309706, "uuid": "e6897f0d-1f51-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/5b6c776550c848edb0f934ca721ce538.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745309768, "uuid": "0b3c5d64-1f52-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.251.4:52920/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745309774, "uuid": "0f062417-1f52-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.54:45652/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745309945, "uuid": "74a1f34e-1f52-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.248.245:44168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310004, "uuid": "9807ccca-1f52-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/36b1618d7b2a42b7ae8c7626346c4ddd.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310005, "uuid": "98b0a8ac-1f52-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.16.79:41045/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310083, "uuid": "c7473180-1f52-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.220.24:50232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310084, "uuid": "c78cdbb0-1f52-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.161.224:50643/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310262, "uuid": "31a9e556-1f53-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.158.9:60977/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310305, "uuid": "4b2fad57-1f53-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/17ce925df66e43eeb2e2a87dca9544a1.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310365, "uuid": "6ed4e702-1f53-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.87.182:48864/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310485, "uuid": "b6746ee6-1f53-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.180.79:48511/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310665, "uuid": "21e87467-1f54-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/96959f79e4554398a0db8557013718c7.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310708, "uuid": "3bc907c7-1f54-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.42:41878/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310845, "uuid": "8d25c8b4-1f54-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.174.239:57389/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745310962, "uuid": "d3002bec-1f54-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/734df85822ff45d298da792e0e81679c.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745311144, "uuid": "3faae4a5-1f55-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.161.224:50643/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745311264, "uuid": "86bb7ef7-1f55-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.177.151.72:42960/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745311264, "uuid": "86d6b102-1f55-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.247:45917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745311265, "uuid": "877ff3de-1f55-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.192.82:50792/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745311267, "uuid": "88e9985f-1f55-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/7a4daf6c42d1463a89c4ec229d60e4b9.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745311445, "uuid": "f2e39711-1f55-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.251.4:52920/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745311446, "uuid": "f359c4fe-1f55-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.28.118:54472/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745311448, "uuid": "f49df84c-1f55-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.54:45652/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745311505, "uuid": "16d427f5-1f56-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.85.0:52919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745311563, "uuid": "390c2748-1f56-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/0fc5b62906f748f3a77bea8ea9dcce84.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745311627, "uuid": "5f045ec0-1f56-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.48:49101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745311685, "uuid": "81b945ac-1f56-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.154.80:52039/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745311805, "uuid": "c995f9e3-1f56-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.50.129:43430/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745311806, "uuid": "ca0f24b6-1f56-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.252.19:40335/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745311863, "uuid": "ebea6e73-1f56-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/4ffd207ce7414259a524196d97b98a19.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745311863, "uuid": "ebfcaf0e-1f56-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.180.79:48511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745311924, "uuid": "1031ab83-1f57-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.199.54:45684/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745311984, "uuid": "343ed92d-1f57-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.154.80:52039/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745311986, "uuid": "3502d964-1f57-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.78.43:57841/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312106, "uuid": "7c870202-1f57-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.42:41878/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312224, "uuid": "c2e9fc96-1f57-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/1b00e3a5220343508ad9ebeaf3fafdcb.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312225, "uuid": "c37c1d6e-1f57-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.192.82:50792/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312527, "uuid": "778b839e-1f58-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/74d1cba994be414ab1d6354090080548.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312644, "uuid": "bd4036df-1f58-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.79.118:37098/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312647, "uuid": "bf6c3bb7-1f58-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.174.190:36017/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312648, "uuid": "bffdfde2-1f58-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.161.160.151:44180/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312657, "uuid": "c4eebe10-1f58-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.203.72.66:60202/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312663, "uuid": "c8b77775-1f58-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.21.11:39420/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312673, "uuid": "cead34d5-1f58-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.10.169.22:36113/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312673, "uuid": "cead36a2-1f58-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.202.135:53922/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312673, "uuid": "ceaf12f9-1f58-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.208.74:38391/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312673, "uuid": "ceb09b42-1f58-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.108.158:60974/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312673, "uuid": "ceb2d31c-1f58-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.143.138:40735/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312673, "uuid": "cebef84e-1f58-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.202.8:52022/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312673, "uuid": "cec0d102-1f58-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.134.143:47817/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312673, "uuid": "ced98014-1f58-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.48.66.145:44387/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312673, "uuid": "cef25c72-1f58-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.238.109:34245/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312705, "uuid": "e194715a-1f58-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.177.151.72:42960/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312706, "uuid": "e29aa4d5-1f58-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.203.190:60846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312824, "uuid": "28ea33d5-1f59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.252.19:40335/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312827, "uuid": "2a8e5ada-1f59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/e856b4b4b4044aeb83803ce2d5fef481.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745312885, "uuid": "4cdbb6b7-1f59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.102.75:59197/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745313007, "uuid": "95a14beb-1f59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.224:45536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745313065, "uuid": "b8b38bd6-1f59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.87.52:45240/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745313123, "uuid": "db0a6dab-1f59-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/f019cf207d1247b3919e65f3356ea08b.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745313364, "uuid": "6ab9141c-1f5a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.97.142:54976/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745313425, "uuid": "8f01d38d-1f5a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/e1bfd37ba0034a7698c7945cdcee6526.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745313604, "uuid": "f9c8b597-1f5a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.102.75:59197/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745313665, "uuid": "1e08447e-1f5b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.92.65.88:36481/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745313723, "uuid": "40dce3b0-1f5b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/6ff960b5d433495ca4f2b16c8319b9bc.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314024, "uuid": "f3e46470-1f5b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/12890681ac7a49bc82eea16c1b7d9a00.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314206, "uuid": "6085e9cb-1f5c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.58.206:53832/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314326, "uuid": "a7f0b81f-1f5c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.203.190:60846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314386, "uuid": "cb9dca70-1f5c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/27d708b9508043b992c2ecc7ef631a23.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314387, "uuid": "cc228795-1f5c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.70.50:48463/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314445, "uuid": "eef159a6-1f5c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.28.118:54472/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314446, "uuid": "efd375d5-1f5c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.127.146:54607/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314566, "uuid": "372dea45-1f5d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.87.52:45240/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314567, "uuid": "37b67232-1f5d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.64.31:33306/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314683, "uuid": "7cf766d9-1f5d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/ce2439d3ee754261965b6a459e764863.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745314984, "uuid": "30256c2e-1f5e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/3dbb8bf4bb5b4d6888ddb4a84335c47e.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745315286, "uuid": "e431c3f3-1f5e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/005b6c6101214922b60b00e869851a42.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745315404, "uuid": "2a93b966-1f5f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.92.65.88:36481/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745315584, "uuid": "95a455a4-1f5f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/4e638bd1245d4b5b96c5d644e1a3b2a2.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745315584, "uuid": "9622e7a5-1f5f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.58.206:53832/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745315643, "uuid": "b8ec0e8f-1f5f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.electivewielder.digital/19k9nhreu4.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745315886, "uuid": "49f4c408-1f60-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/48fd807e82dd4c00a6c33e6d16eb9bbd.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745316005, "uuid": "91014bbe-1f60-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.197.44:53545/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745316183, "uuid": "faf42727-1f60-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/4556fc4773dd4fd0a10f760c6a9aaef8.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745316263, "uuid": "2ac585db-1f61-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.170:48210/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745316308, "uuid": "45892c5c-1f61-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpanel.freein-deed.com/profileLayout", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745316363, "uuid": "65fb96d7-1f61-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.127.146:54607/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745316483, "uuid": "adea6242-1f61-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/2ea948f911814b1789a53771b58ccdf2.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745316843, "uuid": "846bf659-1f62-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/2c574d8834a940e68d80c1f90c49b771.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745316845, "uuid": "853dcd8f-1f62-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.195.48:56869/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745317026, "uuid": "f1640c13-1f62-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.142.158:34171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745317145, "uuid": "3858613b-1f63-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/f3b883326ef749c7885d943ba66d402e.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745317450, "uuid": "ee43dda4-1f63-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/31ced4e58b71429ab4d3c1181864f1c5.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745317743, "uuid": "9cfb8e16-1f64-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/0585f6adace248cf983b8493cc36a338.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745317744, "uuid": "9d919177-1f64-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.197.44:53545/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745317926, "uuid": "09c4bbd9-1f65-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.142.158:34171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745318044, "uuid": "501fc8e5-1f65-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/1fe84587d3ac42749c799890bcd42874.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745318105, "uuid": "7470b0cc-1f65-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.195.48:56869/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745318226, "uuid": "bcbaf0c5-1f65-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.45.159:48085/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745318285, "uuid": "dfc3fc2d-1f65-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.191.0.222:35257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745318343, "uuid": "0277f92e-1f66-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/daf7006c651741a8a81da2c1d0d7c4da.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745318345, "uuid": "03d076f3-1f66-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.78.39.56:55130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745318643, "uuid": "b52add88-1f66-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/f2de24fb2ab14436985a3ed06143b708.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745318645, "uuid": "b62e3e22-1f66-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.73.42:36028/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745318944, "uuid": "687c24df-1f67-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/d0e2c80cab674b598ede922b325a0116.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745319304, "uuid": "3f458cdf-1f68-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/1e74e21dfb3a4be98c9a29bb61704e3e.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745319546, "uuid": "cf1db67e-1f68-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.137.246:44967/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745319606, "uuid": "f3489783-1f68-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.45.159:48085/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745319607, "uuid": "f3e260e7-1f68-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/a24f78e480d84e7584960d64886c8ad8.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745319664, "uuid": "15b47a46-1f69-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.78.39.56:55130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745319726, "uuid": "3aadc432-1f69-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.73.161.209:48670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745319904, "uuid": "a4ea01c7-1f69-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/96e608bb89554b7197bb9fb1f251a089.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745320085, "uuid": "1090711e-1f6a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.137.246:44967/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745320204, "uuid": "57d3c417-1f6a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/55722610692d46acbc7ae1c81e7d1031.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745320263, "uuid": "7b0a1a70-1f6a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.73.42:36028/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745320385, "uuid": "c386d172-1f6a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.194.82:46411/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745320504, "uuid": "0a8e0fe7-1f6b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/c46fd66ef54a4e54a5d0da4b5ab9a232.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745320804, "uuid": "bd63b15e-1f6b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/5354d68f5a0f4fa7ad94719c6d72f194.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745320985, "uuid": "28f0d494-1f6c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.194.82:46411/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745320985, "uuid": "2964cd79-1f6c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.191.0.222:35257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745321104, "uuid": "70036486-1f6c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/e3062b5ab1b04356bb41c820da494319.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745321405, "uuid": "23937e41-1f6d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/8438f56f582243ecbb532a9c3806fea1.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745321466, "uuid": "47957379-1f6d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.73.161.209:48670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745321586, "uuid": "8f208c59-1f6d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.28.116:42746/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745321645, "uuid": "b2449077-1f6d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.97.142:54976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745321704, "uuid": "d5a9cbde-1f6d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/ce692edcf41e4df3809d9cfacfaf0435.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745321705, "uuid": "d65a46e4-1f6d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.199.54:45684/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745321764, "uuid": "f931e5b8-1f6d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.244.185:56788/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745321770, "uuid": "fce12e8e-1f6d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.152.224:52468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745321872, "uuid": "3985f985-1f6e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.132.173:33852/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745322064, "uuid": "ac75ef92-1f6e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/98efc091e634490daf75a4c0049f543c.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745322065, "uuid": "acf5ce0d-1f6e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.109.162.96:60512/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745322306, "uuid": "3c51d45f-1f6f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.112.70:39001/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745322364, "uuid": "5f210617-1f6f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/d142b7972f2843b9b0cec543700b1840.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745322400, "uuid": "746fea73-1f6f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.240.203.235:46509/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745322663, "uuid": "112547af-1f70-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/956277b46c064eb1a99f0925abe39a37.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745322664, "uuid": "11bf91ad-1f70-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.28.116:42746/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745322964, "uuid": "c497416c-1f70-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/5e8e4e76ec9c4cae90e160369f0af0a6.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745322966, "uuid": "c5cab225-1f70-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.101.152:41778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323264, "uuid": "77412729-1f71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/72fb5c01e45943dda2501c01bb900f4c.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323385, "uuid": "bf623d5b-1f71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.130:39698/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323446, "uuid": "e405f5d1-1f71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.255.136.72:40579/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323448, "uuid": "e568c859-1f71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.178.151.68:47762/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323450, "uuid": "e666b6d3-1f71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.148.58.226:45005/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323451, "uuid": "e6b97998-1f71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.66.164.42:56435/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323466, "uuid": "efab319f-1f71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.122.96:45403/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323473, "uuid": "f4307d56-1f71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.208.254:40681/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323473, "uuid": "f4322376-1f71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.1.187:49200/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323473, "uuid": "f433448d-1f71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.136.218:40347/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323473, "uuid": "f43345cb-1f71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.98.75.228:41931/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323473, "uuid": "f4337fc0-1f71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.98.8.5:52789/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323473, "uuid": "f43db4d0-1f71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.52.252.233:38375/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323473, "uuid": "f4403d1c-1f71-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.204.244:48837/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323504, "uuid": "06cbc06c-1f72-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.76.98:33057/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323564, "uuid": "2a1af04c-1f72-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/51a9ef4b196643cb9cd44e317c863484.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323571, "uuid": "2e994cfd-1f72-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.127.178:51710/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323745, "uuid": "964c85aa-1f72-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.206.20.254:32999/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323814, "uuid": "bf9a1e59-1f72-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.124.195.139:49164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323814, "uuid": "bf9aacf2-1f72-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.206.20:52475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323863, "uuid": "dca73840-1f72-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/d47387388f264fc18f0c40dbbd6f9a18.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745323882, "uuid": "e7c3b978-1f72-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.126.103:46771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745324225, "uuid": "b449995f-1f73-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/7d483528f46d4738ac015d8453ad2672.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745324524, "uuid": "666038d1-1f74-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/e898d6103c0b41e6a47941258fc62373.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745324586, "uuid": "8b961f31-1f74-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.174.91.164:55435/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745324705, "uuid": "d2935919-1f74-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.130:39698/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745324825, "uuid": "1a2b7370-1f75-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/cedb0e0c2673480d87e29efb15dbb2cf.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745324826, "uuid": "1a38c63e-1f75-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.35.122:45277/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745325007, "uuid": "8660dfb1-1f75-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.206.20.254:32999/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745325124, "uuid": "cc3825f8-1f75-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vynen.icu/6d2fee3cd59d42ebaf505c573670c2b5.txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745325153, "uuid": "dda03f26-1f75-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.206.20:52475/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745325245, "uuid": "147e20b9-1f76-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.4.2.45:56753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745325906, "uuid": "9e05e848-1f77-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.8.240:43520/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745325913, "uuid": "a29e0375-1f77-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.133.95:56200/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745325966, "uuid": "c20458ac-1f77-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.125.121:58763/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745326144, "uuid": "2c405907-1f78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.10.37.35:60294/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745326285, "uuid": "80557976-1f78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.174.91.164:55435/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745326386, "uuid": "bc4e770d-1f78-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.176.176:49324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745326505, "uuid": "0374dbd9-1f79-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.101.152:41778/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745326688, "uuid": "708de828-1f79-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.4.2.45:56753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745326805, "uuid": "b65a96e4-1f79-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.125.121:58763/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745327285, "uuid": "d3f84a19-1f7a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.10.37.35:60294/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745327644, "uuid": "aa33a25e-1f7b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.168.97.153:60887/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745327706, "uuid": "cee0c4cd-1f7b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.176.176:49324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745328845, "uuid": "75c7d805-1f7e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.9.246:49825/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745328966, "uuid": "be15047d-1f7e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://76.8.205.34:46712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745329265, "uuid": "70aa2813-1f7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.95.30:42804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745329446, "uuid": "dbf84296-1f7f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.7.110:53204/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745329626, "uuid": "4749c84c-1f80-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.201.13:34037/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745329645, "uuid": "52ea00f3-1f80-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.49.193:49740/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745330466, "uuid": "3c65e377-1f82-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://76.8.205.34:46712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745330586, "uuid": "83e8614c-1f82-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.173.34:34775/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745330654, "uuid": "ac37c595-1f82-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.5.251:42677/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745330766, "uuid": "eefb2de3-1f82-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.247:44801/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745330839, "uuid": "1ad21f01-1f83-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.49.193:49740/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745330952, "uuid": "5e308ff3-1f83-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.201.13:34037/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745331306, "uuid": "30f69e09-1f84-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.133.231:55758/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745331427, "uuid": "78da07e4-1f84-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.139.78:51325/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745331545, "uuid": "bf134df4-1f84-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.173.34:34775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745332086, "uuid": "01d87615-1f86-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.5.251:42677/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745332292, "uuid": "7c8b2bd2-1f86-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.89.181:47211/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745332992, "uuid": "1dad61dd-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.84.74:54728/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333104, "uuid": "6057de97-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://cm9iuupni00010cjy3657dsol.info", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333104, "uuid": "605951e5-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://casalomaminca.com/wp-content/uploads/2025/02/1tron.vbs_.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333104, "uuid": "6064d110-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://catering.com.pt/te/1method.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333104, "uuid": "607bdddd-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://skynetx.com.br/license/2/1tronvbs.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333104, "uuid": "6085a7f5-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://catering.com.pt/te/1tronvbs.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333104, "uuid": "60c44251-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://catering.com.pt/te/1xx.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333105, "uuid": "611285dc-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://catering.com.pt/te/1Framework.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333105, "uuid": "6155f804-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://catering.com.pt/te/1Execute.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333106, "uuid": "61802471-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://docs2025.com.br/vbs.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333106, "uuid": "618228b3-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://catering.com.pt/te/1type.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333106, "uuid": "61922dd3-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://fuckhdmov.top/desk/loop.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333106, "uuid": "619d54ab-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://casalomaminca.com/wp-content/uploads/2025/02/a.html", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333106, "uuid": "61cd0899-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://paste.ee/d/hubur512", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333106, "uuid": "620de113-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://catering.com.pt/te/1invoke.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333107, "uuid": "6287aa99-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://biteblob.com/Download/9DDDTpP4777ip5/#ohshit.sh", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333108, "uuid": "6334b6a7-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://paste.ee/r/K4DnLcRZ", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333109, "uuid": "63c7942c-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://fuckhdmov.top/desk/select.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333110, "uuid": "64559160-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://itradepay.com/Key.zip", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333112, "uuid": "6517e158-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://spectrumwireless.net/statement.exe", "Tag": [ { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333114, "uuid": "6691e111-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://itradepay.com/Key.zip", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333162, "uuid": "834c5dcd-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://catering.com.pt/te/1load.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333162, "uuid": "834c6461-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://catering.com.pt/te/1tronbat.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333162, "uuid": "836f63a9-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://catering.com.pt/te/1tronps1.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333162, "uuid": "836fdb4f-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://docs2025.com.br/1type.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333162, "uuid": "83701d65-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://catering.com.pt/te/1runpe.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333163, "uuid": "837975b9-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://catering.com.pt/te/1msg.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333163, "uuid": "837991ad-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://docs2025.com.br/1tronbat.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333163, "uuid": "83813a1b-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://docs2025.com.br/1method.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333163, "uuid": "839d5e6e-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://docs2025.com.br/1tronvbs.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333163, "uuid": "83a564cf-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://docs2025.com.br/1invoke.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333163, "uuid": "83a56a5b-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://docs2025.com.br/1load.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333163, "uuid": "83d8f72e-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://docs2025.com.br/1Execute.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333163, "uuid": "83f958d9-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://docs2025.com.br/1xx.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333163, "uuid": "83ffbb9c-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://docs2025.com.br/1tronps1.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333163, "uuid": "84098113-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://docs2025.com.br/1msg.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333164, "uuid": "840e7dca-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://docs2025.com.br/1runpe.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333164, "uuid": "84542927-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://docs2025.com.br/1Framework.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333164, "uuid": "84938c99-1f88-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://paste.ee/d/IC2arhLN", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333405, "uuid": "1424f5ca-1f89-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.65.231:54785/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333465, "uuid": "380cdc65-1f89-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.1.157:60545/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333585, "uuid": "7f4b90a9-1f89-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.139.78:51325/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333764, "uuid": "ea3f9eda-1f89-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.155.33:39634/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333824, "uuid": "0dd18bb1-1f8a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.102.250:35909/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745333824, "uuid": "0ddeab02-1f8a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.87:44345/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334188, "uuid": "e6e7739a-1f8a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.65.231:54785/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334213, "uuid": "f566b2b0-1f8a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.18:34257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334245, "uuid": "08f04f10-1f8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.66.47:40405/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334273, "uuid": "1991d44e-1f8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.98.69.84:41800/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334273, "uuid": "199275ba-1f8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.167.54:55023/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334365, "uuid": "4ff90134-1f8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.55.248:53215/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334366, "uuid": "50893ce0-1f8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.80.251:55753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334408, "uuid": "6a18e37a-1f8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.247:60018/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334424, "uuid": "73614407-1f8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.65.160:50338/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334485, "uuid": "9788fb81-1f8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.223.70:39651/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334545, "uuid": "bb9655a2-1f8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.56.207:40968/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334549, "uuid": "bdc67f71-1f8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.59.119.12:42272/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334555, "uuid": "c19ba001-1f8b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.80.232:43137/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334698, "uuid": "16af8008-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.140.178:48786/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "294790d0-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/ee/armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "29637f4d-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/vv/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "29668e35-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/tt/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "29691a0f-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/tt/riscv32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "2969d705-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/ee/armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334729, "uuid": "2974242b-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/vv/armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "29768d5b-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/vv/armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "29795b69-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/tt/sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "29797138-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/tt/powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "297de364-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/ee/armv4eb", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "297faa95-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/vv/sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "2988d9f7-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/tt/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "2989635d-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/tt/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "298ca1bc-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/vv/powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "298ca413-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/tt/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "298d7c2c-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/ee/armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "298e80ee-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/vv/armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "299187a1-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/vv/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "29987a80-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/vv/armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "299b6300-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/tt/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "29a56b0d-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/vv/riscv32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "29a573e9-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/tt/mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "29acda44-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/tt/armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "29acdea5-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/vv/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "29bb68d1-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/ee/armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "29bcc5aa-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/tt/mipsel64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "29bd146e-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/tt/armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "29cae49f-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/vv/armv4eb", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "29cf71d0-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/vv/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "29cf959f-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/vv/mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "29d23b2b-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/vv/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "29db8237-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/tt/armv4eb", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "29dfe157-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/tt/armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334730, "uuid": "29f45fcc-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/tt/armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334783, "uuid": "4985214a-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/u", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334785, "uuid": "4ad406eb-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/c", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334785, "uuid": "4ad421b1-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/l", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334786, "uuid": "4addf5d6-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/m", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334786, "uuid": "4ae69c7a-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/s", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334844, "uuid": "6def9c7d-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/g", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334844, "uuid": "6df82310-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/e", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334844, "uuid": "6dfbf8b3-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/t", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334844, "uuid": "6dfeb87b-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/v", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334845, "uuid": "6e077137-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/k", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334845, "uuid": "6e1da961-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/n", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334845, "uuid": "6e43547f-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/f", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334845, "uuid": "6e6f8380-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.1.157:60545/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334905, "uuid": "91fddc95-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.24.200.71/r", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745334965, "uuid": "b5f1cecc-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.66.47:40405/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335084, "uuid": "fd04cf3e-1f8c-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.155.33:39634/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335384, "uuid": "afb28349-1f8d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.102.250:35909/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335388, "uuid": "b22ef617-1f8d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://67.223.196.146:40355/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335563, "uuid": "1a3df30c-1f8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.65.160:50338/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335692, "uuid": "67380ad5-1f8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.2.85:35529/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335746, "uuid": "87836a7a-1f8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.41/files/1448402890/T2t1yIo.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335752, "uuid": "8ac4abaf-1f8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.41/files/7595241516/1auS5cW.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335807, "uuid": "ab9a067d-1f8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.191.0.73:57898/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335808, "uuid": "ac331832-1f8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.72.252.88:55638/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335865, "uuid": "ce1c4ab7-1f8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.59.119.12:42272/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335925, "uuid": "f1f741f3-1f8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.223.70:39651/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335925, "uuid": "f23f5bf7-1f8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.140.178:48786/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335927, "uuid": "f34138c5-1f8e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.255.139.19:34551/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335985, "uuid": "15f28832-1f8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.112:47292/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335986, "uuid": "167d7099-1f8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.3.223.110/ccYHMMSqVX193.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745335986, "uuid": "16ac2af6-1f8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.3.223.110/bGjToCA87.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745336227, "uuid": "a60756ae-1f8f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.151.202:37015/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745336585, "uuid": "7bab6747-1f90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.198.132:49070/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745336705, "uuid": "c310e1e5-1f90-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.2.85:35529/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745336884, "uuid": "2def8c33-1f91-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.122.207:57910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745337366, "uuid": "4cbd391e-1f92-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.34.255:46942/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745337667, "uuid": "0046f6ac-1f93-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.87.228:45679/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745337783, "uuid": "45c4a79d-1f93-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.39.17.70/zgrnf/rc.mp4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745337934, "uuid": "9f4a8d4b-1f93-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.151.202:37015/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745337995, "uuid": "c3ad1ba6-1f93-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://secure.gatecollegesystem.com/profileLayout", "Tag": [ { "name": "SocGholish", "colour": "#4f8257", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745338086, "uuid": "f9f7de98-1f93-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.231.242:58780/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745338205, "uuid": "4145f116-1f94-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.34.255:46942/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745338209, "uuid": "4384e0ba-1f94-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://larisantiara.com/content/kentttttt.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745338265, "uuid": "6506d2ef-1f94-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.253.34:35861/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745338325, "uuid": "88b72d2a-1f94-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.49.253:56127/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745338391, "uuid": "afabaaf0-1f94-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://paste.ee/d/sXDSGbbf/0", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745338391, "uuid": "afdc9a03-1f94-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.215.113.41/files/7209081704/dVHicbE.msi", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745338507, "uuid": "f51afbe0-1f94-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://paste.ee/r/OP214y0l/0", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745338845, "uuid": "be75c1fa-1f95-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.243.2:42536/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745339031, "uuid": "2d343110-1f96-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.253.34:35861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745339045, "uuid": "35b915d5-1f96-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.87.228:45679/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745339586, "uuid": "77ec6ed1-1f97-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.185.116:43056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745339645, "uuid": "9b8427cd-1f97-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.49.253:56127/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745340006, "uuid": "72ba20a0-1f98-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.243.2:42536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745340485, "uuid": "90341561-1f99-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.107.229:51799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745340501, "uuid": "99a119b3-1f99-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.187.21:46261/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745340545, "uuid": "b3dc60fd-1f99-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://76.72.238.123:36080/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745340606, "uuid": "d842f9d1-1f99-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.12.43:41583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745340631, "uuid": "e6bc2cbe-1f99-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.164:57430/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745340786, "uuid": "435d95a2-1f9a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.225.231.222:33491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341085, "uuid": "f55b3efc-1f9a-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.157.68:50991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341361, "uuid": "99e19d24-1f9b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.53.195:39038/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341515, "uuid": "f5cae919-1f9b-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.electivewielder.digital/91pcby5i3e.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341985, "uuid": "0e004399-1f9d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.107.229:51799/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341985, "uuid": "0e0d8286-1f9d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://76.72.238.123:36080/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341985, "uuid": "0e1373da-1f9d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.187.21:46261/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341985, "uuid": "0e4066c4-1f9d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.242.126:37846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745341986, "uuid": "0e65d187-1f9d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.225.231.222:33491/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745342069, "uuid": "3fe02232-1f9d-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.252.173:52501/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745342466, "uuid": "2ce33739-1f9e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.2.172.47:39857/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745342466, "uuid": "2d00c7d5-1f9e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.76.109:57606/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745342585, "uuid": "73c4db45-1f9e-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.233.200:55600/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745342826, "uuid": "031afdf4-1f9f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.140.79:56983/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745343127, "uuid": "b6840210-1f9f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.76.109:57606/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745343197, "uuid": "e08df8fb-1f9f-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.157.68:50991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745343485, "uuid": "8bdf0de5-1fa0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.208.203:45364/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745343905, "uuid": "8691f55d-1fa1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.80.158:52122/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745344983, "uuid": "094e5689-1fa4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.159.96.179:48453/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745344984, "uuid": "09a5b13f-1fa4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.202.72.58:56065/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745344985, "uuid": "0a71bf57-1fa4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.242.126:37846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745344986, "uuid": "0a8e43a4-1fa4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.151.170:51333/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745344986, "uuid": "0ad7d9fe-1fa4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.74:58220/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745344989, "uuid": "0c9a960a-1fa4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.34.225:42337/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745345013, "uuid": "1b2d1669-1fa4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.97.197.177:37337/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745345014, "uuid": "1b3d1c0b-1fa4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.138.12.70:57116/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745345014, "uuid": "1b7fe4d2-1fa4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.69.114:54196/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745345014, "uuid": "1b923255-1fa4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.83.25:55191/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745345109, "uuid": "53d632cb-1fa4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.electivewielder.digital/h5q0ygg5oi.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745345464, "uuid": "27be311a-1fa5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.152.236:44545/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745345530, "uuid": "4f2bf7a2-1fa5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.10.10.146:39454/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745346424, "uuid": "63f24c3b-1fa7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.139.97.177:39252/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745346606, "uuid": "d09be01f-1fa7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.206.37:46520/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745346665, "uuid": "f37a08cf-1fa7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.80.251:55753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745346785, "uuid": "3af8ca74-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.152.236:44545/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745346799, "uuid": "43892f05-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.255.111:51155/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347084, "uuid": "ed12450b-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://webmail.cracsiu.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347085, "uuid": "eda31586-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://cloudservicesexecelsmontumda.com/Documents/Documents", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347089, "uuid": "f03b67d9-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://webdisk.cutterenergysolutions.info/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347089, "uuid": "f03e5360-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.legacyplatformfile.info/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347089, "uuid": "f046bcce-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.novapnagaea.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347089, "uuid": "f049bd7d-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://cpcalendars.7ntneg.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347089, "uuid": "f04e70e9-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.alva-technology.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347089, "uuid": "f0500854-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.cloudservicesexecelsmontumda.com/Documents/Documents", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347089, "uuid": "f0511429-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.novapnagaea.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347089, "uuid": "f0522856-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.vega101.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347089, "uuid": "f061b72d-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.cutterenergysolutions.info/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347089, "uuid": "f064b993-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.32.108:52663/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347089, "uuid": "f06b248c-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://cpcalendars.mondial-ae.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347089, "uuid": "f082f5eb-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://webdisk.enfamxb.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347089, "uuid": "f082fc76-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://webmail.lamperll.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347089, "uuid": "f0836554-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.wetllands.co/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347089, "uuid": "f089062e-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://cpcalendars.borubon-online.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347090, "uuid": "f0b32fc3-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://8vq.allaeima.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347090, "uuid": "f0b514fc-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://cpcontacts.sinoceancn.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347090, "uuid": "f0b65a2e-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.asnako.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347090, "uuid": "f0e8e3ce-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.constructionproject.cc/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347090, "uuid": "f0ebca29-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.greenmountain-no.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347091, "uuid": "f14182e9-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://8vq.allaeima.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347091, "uuid": "f1436a93-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://webdisk.enfamxb.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347091, "uuid": "f16b268d-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://imvocky.gay.global.prod.fastly.net/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347091, "uuid": "f175813b-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.greenmountain-no.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347091, "uuid": "f1c4ac3b-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.cutterenergysolutions.info/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347092, "uuid": "f20eb4b3-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.wetllands.co/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347092, "uuid": "f214bf73-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://webdisk.vega101.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347092, "uuid": "f22d8652-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://cpanel.landoradebalthazar.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347092, "uuid": "f24b9ecd-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.asnako.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347092, "uuid": "f250819b-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://webmail.qualityglobal.wiki/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347093, "uuid": "f296ec71-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.danfsos.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347095, "uuid": "f3ac8398-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.danfsos.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347095, "uuid": "f3ba5d7d-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://cpcalendars.landoradebalthazar.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347096, "uuid": "f43fcd0a-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://cpanel.landoradebalthazar.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347096, "uuid": "f440c8a7-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.constructionproject.cc/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347096, "uuid": "f4b9c2a1-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.vega101.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347097, "uuid": "f4e4111a-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.legacyplatformfile.info/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347097, "uuid": "f4eda0b5-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://webmail.lamperll.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347097, "uuid": "f4f8f329-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://webmail.mondial-ae.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347097, "uuid": "f517275b-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://webdisk.matenom.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347097, "uuid": "f52e9c46-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://cpcalendars.mondial-ae.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347097, "uuid": "f53288cd-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://cpcalendars.nvdcsadmin.org/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347097, "uuid": "f537b387-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://webdisk.cutterenergysolutions.info/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347097, "uuid": "f548c87f-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.ewsaustraila.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347098, "uuid": "f5746f3c-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.gdocudrive.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347098, "uuid": "f574874c-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://webmail.qualityglobal.wiki/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347098, "uuid": "f5757014-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://webmail.aaoun.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347098, "uuid": "f576b1c3-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://cpcalendars.landoradebalthazar.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347098, "uuid": "f57a2e6e-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.ewsaustraila.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347098, "uuid": "f57f3258-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://webmail.mercuirusint.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347098, "uuid": "f585d6ce-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://mail.gdocudrive.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347098, "uuid": "f58d9202-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://webmail.mercuirusint.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347098, "uuid": "f58deb15-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://webdisk.matenom.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347098, "uuid": "f5a5b3af-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://cpcalendars.7ntneg.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347098, "uuid": "f5aca5b7-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.alva-technology.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347098, "uuid": "f5b91da4-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://webmail.mondial-ae.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347098, "uuid": "f5b9edf4-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://webmail.aaoun.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347098, "uuid": "f5c3b992-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://webdisk.vega101.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347098, "uuid": "f5c4fae9-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://cpcalendars.nvdcsadmin.org/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347098, "uuid": "f5c6488f-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://cpcalendars.borubon-online.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347098, "uuid": "f5ce7f44-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://imvocky.gay.global.prod.fastly.net/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347098, "uuid": "f5cfeb5a-1fa8-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://cpcontacts.sinoceancn.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347149, "uuid": "144df0ae-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.ratrislio.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347149, "uuid": "144f3e37-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpcalendars.ralvinetp.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347150, "uuid": "147024d9-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpcalendars.brazenf.ru/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347150, "uuid": "1495692c-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpanel.quixotic4.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347150, "uuid": "14a018a3-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.eighlereg.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347150, "uuid": "14a4b3eb-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.vorynexa.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347150, "uuid": "14b42e12-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpanel.edistrami.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347150, "uuid": "14b845e0-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://35fas.cracsiu.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347151, "uuid": "1519dda7-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.ormoncion.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347151, "uuid": "151a1fd5-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpcontacts.nateleybo.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347151, "uuid": "1526c07e-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.eighlereg.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347151, "uuid": "152ea1f7-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.trioneyev.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347151, "uuid": "1538c7b2-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.trioneyev.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347151, "uuid": "153b219d-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://bxozc.brazenf.ru/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347151, "uuid": "1543cda8-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpanel.tyamile.ru/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347151, "uuid": "1546ca50-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpanel.edistrami.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347151, "uuid": "15483784-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpanel.keystonestratgy.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347151, "uuid": "157a06b9-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpcontacts.ealacrity.ru/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347151, "uuid": "1588ebc3-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpanel.keystonestratgy.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347152, "uuid": "159421de-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://35fas.cracsiu.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347152, "uuid": "15aee5ae-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.webbrewentzel.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347152, "uuid": "15c0145a-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.ormoncion.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347152, "uuid": "15c21727-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpcontacts.ealacrity.ru/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347152, "uuid": "15c32487-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpcontacts.abandone.ru/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347152, "uuid": "15c966e0-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://bxozc.brazenf.ru/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347152, "uuid": "15d72364-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpcalendars.brazenf.ru/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347152, "uuid": "15eb4cba-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.ealacrity.ru/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347152, "uuid": "16028d39-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.vorynexa.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347152, "uuid": "1607ac4b-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpcontacts.nateleybo.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347152, "uuid": "161c109e-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://webdisk.tyamile.ru/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347153, "uuid": "16287bf6-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.auiesce.ru/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347153, "uuid": "162936e6-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.webbrewentzel.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347153, "uuid": "16310b77-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.sialtysic.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347153, "uuid": "16693ce6-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpcalendars.ralvinetp.com/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347153, "uuid": "16737ba8-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpcontacts.abandone.ru/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347153, "uuid": "16751129-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpanel.quixotic4.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347153, "uuid": "1676efe1-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.auiesce.ru/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347153, "uuid": "1677a2b5-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.ealacrity.ru/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347153, "uuid": "167b5524-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.sialtysic.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347153, "uuid": "1681c503-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://webdisk.tyamile.ru/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347153, "uuid": "16af995a-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://cpanel.tyamile.ru/Downloads/test.pdf.lnk", "Tag": [ { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347154, "uuid": "16e3073c-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://mail.ratrislio.com/Downloads/test", "Tag": [ { "name": "Emmenhtal", "colour": "#c1b65e", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347209, "uuid": "37c58eca-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.184.143.175/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347209, "uuid": "37c61f5e-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.224.151.255/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347209, "uuid": "37c9235e-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.224.149.173/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347209, "uuid": "37d008d5-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.12.112.112:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347209, "uuid": "37d09292-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.241.35.186:12594/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347209, "uuid": "37fcefd7-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.18.190.234:91/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347209, "uuid": "3814c02e-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.117.196.202:87/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347209, "uuid": "3819dfb6-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.157.28.92:8497/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347210, "uuid": "3833936e-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.238.213.218:15158/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347210, "uuid": "383a797f-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.243.36.33:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347210, "uuid": "383b60d7-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.185.151.233:44537/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347210, "uuid": "383e175e-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.45.102.38:4986/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347210, "uuid": "3848a34b-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.79.156.34:16162/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347210, "uuid": "384b9c55-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.3.130.97:10491/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347210, "uuid": "3857a636-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.172.50.67:6086/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347210, "uuid": "38641c5a-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.143.12.88:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347210, "uuid": "3868bead-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.15.69:56840/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347210, "uuid": "3870edc2-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.187.12.57:16993/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347210, "uuid": "3871ce42-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.160.15.235:8081/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347210, "uuid": "387cbea3-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.173.219.205:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347210, "uuid": "388486a2-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.70.218:8083/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347210, "uuid": "3890a3b3-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.70.218:8081/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347210, "uuid": "389dfc53-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.67.125:8083/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347210, "uuid": "389f5a72-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.70.218:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347210, "uuid": "38a9142e-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.233.151.168/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347212, "uuid": "39981352-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.115.25:2168/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347229, "uuid": "43854cd7-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.130.85:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347281, "uuid": "62c89c69-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.200.162.69:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347324, "uuid": "7ca404fe-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.206.37:46520/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347325, "uuid": "7cf47fc3-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.224.148.152/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347353, "uuid": "8dc4ea24-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.18.210.168/Demon.arm6", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347353, "uuid": "8dc6416c-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.18.210.168/Demon.ppc", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347353, "uuid": "8dc91d1d-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.18.210.168/Demon.i586", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347353, "uuid": "8dc948f6-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.18.210.168/Demon.arm4", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347353, "uuid": "8dcc7773-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.18.210.168/Demon.mips", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347353, "uuid": "8dd2e3ee-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.18.210.168/Demon.sh4", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347353, "uuid": "8dd36951-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.18.210.168/Demon.mpsl", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347353, "uuid": "8dd3e7f0-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.18.210.168/bins.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347353, "uuid": "8dd3eba4-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.18.210.168/Demon.sparc", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347353, "uuid": "8dd48fa6-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.18.210.168/Demon.x86", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347353, "uuid": "8dd7ffb7-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.18.210.168/Demon.arm5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347353, "uuid": "8dd8030a-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.18.210.168/Demon.i686", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347353, "uuid": "8de005a7-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.18.210.168/Demon.m68k", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347386, "uuid": "a16751c2-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.234.214:58167/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347443, "uuid": "c35ede01-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/eed8989/t-04-11-25/blob/main/Cookie.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347443, "uuid": "c36306a2-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/eed8989/t-04-11-25/blob/main/dcm.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347444, "uuid": "c3ba0a28-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://demopark.com.tr/rayidverifications.txt", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347444, "uuid": "c42a3200-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.64.52:56242/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347445, "uuid": "c482ae80-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://booking-refguestitem-09064111.com/", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347445, "uuid": "c4bf6301-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://beyondlifeofmine.com/4Xaxk4EACT6VWBewvpximhJFENH0WOMBXY3", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347446, "uuid": "c55dd108-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://demopark.com.tr/GUP.zip", "Tag": [ { "name": "booking", "colour": "#191e8c", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347447, "uuid": "c5b75015-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/eed8989/u/main/ud.bat", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347449, "uuid": "c6ed6ebf-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.dropbox.com/scl/fi/hyw2km9h5ugn51v29tmzw/t1-04-18-25.bat?rlkey=xxwbickr9hwoiwh7ohfxlm7xd&st=wxdoib6w&dl=1", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347463, "uuid": "cf158aa6-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.66.241:54746/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347465, "uuid": "d05de169-1fa9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.dropbox.com/scl/fi/t84ge1dkwboh7pvkcgwu9/T1-2025.zip?rlkey=9xdua022pl3hjen7vcg12mnwi&st=a02wjzfy&dl=1", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347568, "uuid": "0da492ef-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.250.180.208/bins/jew.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347568, "uuid": "0da7ae00-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.250.180.208/bins/jew.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347568, "uuid": "0db29b41-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.250.180.208/bins/jew.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347568, "uuid": "0db4bf24-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.250.180.208/bins/jew.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "30e97a6e-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.250.180.208/bins/jew.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "30ef6388-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.250.180.208/bins/jew.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "30ef6d16-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.250.180.208/bins/jew.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "30ef7f5d-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.250.180.208/bins/jew.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "30f0f8e9-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.127.7.163/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "30f11383-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.127.7.163/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "30f26073-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.250.180.208/bins/jew.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "30f5bfe1-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.127.7.163/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347627, "uuid": "310a269f-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.250.180.208/bins/jew.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347628, "uuid": "3154c5de-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.127.7.163/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347628, "uuid": "3161777c-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.127.7.163/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347628, "uuid": "31aa5e29-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.127.7.163/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347629, "uuid": "31f21cca-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.250.180.208/bins/jew.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347685, "uuid": "534d84f7-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.127.7.163/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347685, "uuid": "535d8396-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.127.7.163/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347685, "uuid": "5375106b-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.127.7.163/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347745, "uuid": "770bc809-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.127.7.163/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347807, "uuid": "9bf93515-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.208.112.27:48376/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347807, "uuid": "9c57bb0f-1faa-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://watitoto6login.com/Kberen.lpk", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347984, "uuid": "05c83cf1-1fab-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://bigfish.lovestoblog.com/arquivo_21905d6407854e6b8883edc035bb518f.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347987, "uuid": "075f34b1-1fab-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://paste.ee/d/T6aMDoRB/0", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745347988, "uuid": "080a623d-1fab-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://bigfish.lovestoblog.com/arquivo_e612b6bad8404d5f87ea03be987ba032.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348046, "uuid": "2aa0a202-1fab-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.170.248.155:49908/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348466, "uuid": "24d863b4-1fac-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.27.143.73:4646/invoice/invoive/invoice111%20%2D%20Shortcut.lnk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348466, "uuid": "24db116e-1fac-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.27.143.73:4646/sch.bat", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348466, "uuid": "24dff1ba-1fac-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.27.143.73:4646/Case%20study.pdf.lnk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348466, "uuid": "24e02c74-1fac-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.27.143.73:4646/invoice/inv.bat", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348466, "uuid": "24e034a1-1fac-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.27.143.73:4646/invoice/invoive/invoice111%20%2D%20Shortcut%20%282%29.lnk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348466, "uuid": "24e0504c-1fac-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.27.143.73:4646/start.cmd", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348525, "uuid": "485648b9-1fac-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.27.143.73:4646/invoice/invoive/inv.bat", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348586, "uuid": "6c85fe35-1fac-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.234.214:58167/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348645, "uuid": "8f93abe4-1fac-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.32.108:52663/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348764, "uuid": "d6bdea89-1fac-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.238.247:38271/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745348842, "uuid": "0550c96b-1fad-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.232.72:42839/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745349124, "uuid": "ad445d02-1fad-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.197.18:48079/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745349185, "uuid": "d16d1105-1fad-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.75.136:39829/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745349245, "uuid": "f5a4572f-1fad-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.208.112.27:48376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745349305, "uuid": "190a06cc-1fae-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.75.136:39829/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745349545, "uuid": "a86d52ad-1fae-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.67.49:43734/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745349605, "uuid": "cbf2fdf8-1fae-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.170.248.155:49908/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745349845, "uuid": "5b26a517-1faf-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.232.72:42839/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745349906, "uuid": "7f470cd0-1faf-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.255.111:51155/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745350505, "uuid": "e467c922-1fb0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.84.138.217:33976/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745350505, "uuid": "e4918a13-1fb0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.248.231:53956/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745350805, "uuid": "97493337-1fb1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.174.187:60827/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745350805, "uuid": "974e57d8-1fb1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.67.49:43734/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745351063, "uuid": "3133a782-1fb2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.81.83:48079/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745351947, "uuid": "401fba04-1fb4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.53.229:45989/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745352125, "uuid": "aa374d15-1fb4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.84.138.217:33976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745352304, "uuid": "14ae9475-1fb5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.electivewielder.digital/ahthcngexm.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745352426, "uuid": "5d5c97ed-1fb5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.141.230:39306/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745352433, "uuid": "61b5a94b-1fb5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.201.203:55853/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745352488, "uuid": "82919548-1fb5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.81.83:48079/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745352725, "uuid": "0fa53c0a-1fb6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.218.59.189:32791/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745352730, "uuid": "12761cfe-1fb6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.113.131.135:37889/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745354106, "uuid": "46c990d3-1fb9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.243.69.230:42236/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745354585, "uuid": "64091bba-1fba-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.238.107:39243/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745354706, "uuid": "ac76f97a-1fba-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.41.45.120:47427/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355006, "uuid": "5f5646c8-1fbb-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.146.92.46:51915/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355486, "uuid": "7d0c875b-1fbc-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.221.54:37094/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355574, "uuid": "b1db17a5-1fbc-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.63.223:55421/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355662, "uuid": "e67bef39-1fbc-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.electivewielder.digital/qsxmwbgg53.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355664, "uuid": "e7a7390e-1fbc-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.141.230:39306/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355726, "uuid": "0c525139-1fbd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.41.45.120:47427/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355785, "uuid": "2fa89f65-1fbd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.191.209:50909/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355786, "uuid": "2fe4cd14-1fbd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.180.86:35747/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355786, "uuid": "2ffa3cbf-1fbd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.34.146:35021/Mozi.m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355788, "uuid": "319731e2-1fbd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.148.58.226:59909/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355813, "uuid": "40730f54-1fbd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.122.169:39814/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355814, "uuid": "408984f1-1fbd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.98.41.84:38391/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355905, "uuid": "76cabd2f-1fbd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://buqoc.icu/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745355964, "uuid": "9a2ac4f9-1fbd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://vaboz.icu/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745356146, "uuid": "0667ac28-1fbe-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.152.41:42502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745356521, "uuid": "e5f82a39-1fbe-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.143:41480/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745356566, "uuid": "011bc5f5-1fbf-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.106.146:23029/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745356686, "uuid": "48a8d990-1fbf-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.77.79:47685/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745357344, "uuid": "d0dbced0-1fc0-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.152.41:42502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745357896, "uuid": "198c7bb3-1fc2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.221.54:37094/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745358125, "uuid": "a27e7dca-1fc2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.45.54:33470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745358785, "uuid": "2bc76751-1fc4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.143:41480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745359025, "uuid": "ba9637ad-1fc4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.160.111:33190/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745359264, "uuid": "48ff7c15-1fc5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.electivewielder.digital/jnlawcfh0c.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745359265, "uuid": "49efb5a6-1fc5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.53.229:45989/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745359445, "uuid": "b4fa1a5f-1fc5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.169.159:46526/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745359505, "uuid": "d8a32d0a-1fc5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.169.159:46526/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745359626, "uuid": "21156ee8-1fc6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.252.173:52501/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745359685, "uuid": "43e157c5-1fc6-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.233.200:55600/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745360105, "uuid": "3e5189c3-1fc7-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.45.54:33470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745360944, "uuid": "3291c4e1-1fc9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://164.163.25.141:55912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745361008, "uuid": "58e0a02c-1fc9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.22.69:39539/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745361065, "uuid": "7aae9c9a-1fc9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.22.69:39539/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745361246, "uuid": "e669ff3a-1fc9-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.194.74:48270/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745361366, "uuid": "2e123f3b-1fca-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.112.250:52558/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745361965, "uuid": "934ec3bb-1fcb-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.83.78:44473/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745362340, "uuid": "72653846-1fcc-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.140.165:32821/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745362505, "uuid": "d5010afc-1fcc-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.61.121.82:45609/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745362506, "uuid": "d5630741-1fcc-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.113.131.135:37889/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745362744, "uuid": "634aac4f-1fcd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.194.74:48270/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745362864, "uuid": "ab086f6e-1fcd-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "https://u1.electivewielder.digital/d0umvzo7s5.xi", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745363118, "uuid": "426d62ba-1fce-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.255.189.137:49418/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745363405, "uuid": "edaefd9a-1fce-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.110.133:34362/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745363585, "uuid": "58d70234-1fcf-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.198.234:43563/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745363585, "uuid": "58ed7c19-1fcf-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.70.160.111:33190/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745364366, "uuid": "29ecfdda-1fd1-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.52.4.85:44161/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745364845, "uuid": "47b8b5eb-1fd2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.198.234:43563/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745364965, "uuid": "8f4b50ed-1fd2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.110.133:34362/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745364965, "uuid": "8f6f8802-1fd2-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.189.148:40346/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745365626, "uuid": "18fa5e01-1fd4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.40.28:44168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745365986, "uuid": "efc91d4b-1fd4-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.52.4.85:44161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745366044, "uuid": "12906a73-1fd5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.166.175:38656/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745366179, "uuid": "62b6ced2-1fd5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.35.159:55374/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1745366225, "uuid": "7e70be01-1fd5-11f0-82df-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.189.148:40346/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745298004, "uuid": "a74d9f67-1f36-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.135.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745331424, "uuid": "76f0d614-1f84-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.139.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292604, "uuid": "14e7698c-1f2a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.16.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745359022, "uuid": "b909d621-1fc4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.70.160.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745304062, "uuid": "c26b0789-1f44-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.74.13.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745323443, "uuid": "e21ef42b-1f71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.1.187", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280242, "uuid": "4c94b671-1f0d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.101.63", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745312643, "uuid": "bc9f0f0b-1f58-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.108.158", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301843, "uuid": "974f3ced-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.112.185", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745312643, "uuid": "bc9e4a75-1f58-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.134.143", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291043, "uuid": "72373da3-1f26-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.135.149", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745323443, "uuid": "e21f5b90-1f71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.136.218", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745312643, "uuid": "bc9e53dc-1f58-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.143.138", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334243, "uuid": "077eeddf-1f8b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.167.54", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745344983, "uuid": "09183ad2-1fa4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.197.177", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745312643, "uuid": "bc9e4659-1f58-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.202.135", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745312643, "uuid": "bc9f0062-1f58-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.202.8", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280242, "uuid": "4c94fc61-1f0d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.204.142", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745323443, "uuid": "e21f371f-1f71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.204.244", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745323443, "uuid": "e21f4be1-1f71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.208.254", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745312643, "uuid": "bc9f07e6-1f58-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.208.74", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280242, "uuid": "4c951db5-1f0d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.24.234", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745290982, "uuid": "4e36ac1d-1f26-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.68.224", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280183, "uuid": "28f70cd8-1f0d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.97.69.71", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301843, "uuid": "975b5720-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.98.38.207", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291043, "uuid": "723753a8-1f26-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.98.39.150", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291043, "uuid": "7235da79-1f26-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.98.41.233", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355783, "uuid": "2e673174-1fbd-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.98.41.84", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280242, "uuid": "4c94a243-1f0d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.98.5.180", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334243, "uuid": "077eed8e-1f8b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.98.69.84", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745323443, "uuid": "e21f427e-1f71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.98.75.228", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280183, "uuid": "28f6f9f7-1f0d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.98.79.123", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745323443, "uuid": "e21f858e-1f71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.98.8.5", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291043, "uuid": "7235f645-1f26-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.98.80.65", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280183, "uuid": "28f6d804-1f0d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.98.82.170", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291043, "uuid": "723611be-1f26-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.158.171.222", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291043, "uuid": "7236a325-1f26-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.181.64.179", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291043, "uuid": "72369283-1f26-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.199.205.174", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745312643, "uuid": "bc9f0d51-1f58-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.203.72.66", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280242, "uuid": "4c950101-1f0d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.207.124.206", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745312643, "uuid": "bc9e9c76-1f58-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.48.66.145", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745354704, "uuid": "aaf83cbe-1fba-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.41.45.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334543, "uuid": "ba44c2f8-1f8b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.59.119.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299503, "uuid": "25066e7a-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.138", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299503, "uuid": "24fd48e3-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.160", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299562, "uuid": "47d49f25-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.161", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299562, "uuid": "47d4b584-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.166", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299562, "uuid": "47d51020-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.168", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "27864370-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.169", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299562, "uuid": "47ddd36d-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.173", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "4ad44782-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.180", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299562, "uuid": "47e43b07-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.183", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299562, "uuid": "47d52d8c-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.185", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299562, "uuid": "47d5d34e-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.190", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299567, "uuid": "4b29c882-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.199", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299505, "uuid": "25c84738-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.200", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299503, "uuid": "24fa3b7b-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.205", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299562, "uuid": "47d58917-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.207", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299562, "uuid": "47d4870c-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.212", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299562, "uuid": "47d4c6d3-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.214", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299562, "uuid": "47df8788-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.218", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299562, "uuid": "47d54c69-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.223", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299562, "uuid": "47d9a363-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.225", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299562, "uuid": "47d66731-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.228", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299562, "uuid": "47d6dc5e-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.232", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299562, "uuid": "47d4a180-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.150.0.236", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "3496ff94-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.185.151.233", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "348d9427-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.200.162.69", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352723, "uuid": "0e20ba8e-1fb6-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.113.131.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745296143, "uuid": "51dbab30-1f32-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.247.82.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280242, "uuid": "4c94c618-1f0d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.113.33", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745340483, "uuid": "8ec8c6aa-1f99-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.187.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280723, "uuid": "6b34ebdd-1f0e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.60.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291043, "uuid": "72372470-1f26-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.121.73.134", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745342463, "uuid": "2aebbc39-1f9e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.2.172.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745323743, "uuid": "94c95dc0-1f72-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.206.20.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "348d1cf7-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.15.69", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291943, "uuid": "8ab23e7b-1f28-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.79.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299323, "uuid": "b96c32ea-1f39-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.230.81.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745303823, "uuid": "339ddb8f-1f44-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.49.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336583, "uuid": "7a43c80c-1f90-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.198.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745295483, "uuid": "c8bb5a4d-1f30-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.71.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745307723, "uuid": "480a0e82-1f4d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.218.59.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745311682, "uuid": "805ece84-1f56-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.154.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300163, "uuid": "adf28561-1f3b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.2.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745361243, "uuid": "e508fe2b-1fc9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.194.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745338082, "uuid": "f7f699d2-1f93-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.231.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745296323, "uuid": "bd81fb96-1f32-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.40.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745311443, "uuid": "f1b4cbd8-1f55-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.28.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302262, "uuid": "918c4b2d-1f40-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.197.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745312643, "uuid": "bc9e88b4-1f58-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.238.109", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292843, "uuid": "a2de3e46-1f2a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.164.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334363, "uuid": "4ee24943-1f8b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.80.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745330583, "uuid": "82361d6c-1f82-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.173.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745356143, "uuid": "04ded2dd-1fbe-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.152.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292664, "uuid": "385b60bc-1f2a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.51.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310082, "uuid": "c651466f-1f52-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.161.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334543, "uuid": "ba44d5b1-1f8b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.56.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745298543, "uuid": "e894c4e9-1f37-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.98.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745289123, "uuid": "f9c6076b-1f21-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.128.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745284503, "uuid": "3836fee3-1f17-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.204.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745344983, "uuid": "09185953-1fa4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.202.72.58", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745312643, "uuid": "bc9f13c6-1f58-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.174.190", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745281503, "uuid": "3bd1a973-1f10-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.91.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280242, "uuid": "4c94d629-1f0d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.103.239", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "348d4591-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.130.85", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745312643, "uuid": "bc9f179d-1f58-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.21.11", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348823, "uuid": "fa06066d-1fac-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.232.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745295122, "uuid": "f1cd304c-1f2f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.74.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745303823, "uuid": "339dd8f7-1f44-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.124.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745323862, "uuid": "dc2b4ed8-1f72-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.126.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745294583, "uuid": "b05198ee-1f2e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.31.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334363, "uuid": "4ee26b30-1f8b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.82.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745289064, "uuid": "d66b3727-1f21-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.87.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745316243, "uuid": "1eb94d54-1f61-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.87.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745340603, "uuid": "d69ac543-1f99-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.91.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745356503, "uuid": "db9da053-1fbe-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.95.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745282404, "uuid": "54db5e77-1f12-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.95.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292303, "uuid": "61780a11-1f29-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.33.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745366163, "uuid": "5963a478-1fd5-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.35.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745323443, "uuid": "e21f2aca-1f71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.122.96", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351043, "uuid": "2511048c-1fb2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.81.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745332923, "uuid": "f495dbed-1f87-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.214.84.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745329623, "uuid": "45db7e47-1f80-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.49.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745310243, "uuid": "266fb480-1f53-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.158.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299568, "uuid": "4b85b949-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.183.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347442, "uuid": "c2f8237e-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.66.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745321823, "uuid": "1c669804-1f6e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.132.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745331303, "uuid": "2f2cc713-1f84-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.133.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291043, "uuid": "7236f94e-1f26-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.169.217", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745342042, "uuid": "3033f9d8-1f9d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.252.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745305503, "uuid": "1d1ac9c8-1f48-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.252.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745281203, "uuid": "88f0406a-1f0f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.222.26.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745362322, "uuid": "6814bc02-1fcc-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.140.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300283, "uuid": "f59b56eb-1f3b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.232.12.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745309043, "uuid": "5b2bbf34-1f50-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.87.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291043, "uuid": "7235e012-1f26-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.60.242", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745312703, "uuid": "e0ca5b69-1f58-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.203.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745314383, "uuid": "c9ede23a-1f5c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.70.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745311983, "uuid": "334474f0-1f57-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.78.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745340603, "uuid": "d69ab579-1f99-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.12.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745298483, "uuid": "c4a9101b-1f37-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.5.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745294642, "uuid": "d3b7f12b-1f2e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.14.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280183, "uuid": "28f72c8d-1f0d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.32.111", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745344983, "uuid": "0918c85c-1fa4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.34.225", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745363103, "uuid": "3979493b-1fce-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.255.189.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745322063, "uuid": "abaac2f7-1f6e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.109.162.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334422, "uuid": "7252ac7a-1f8b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.65.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745344983, "uuid": "0918d838-1fa4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.138.12.70", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745295722, "uuid": "5779e218-1f31-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.202.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745309763, "uuid": "0889fec3-1f52-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.251.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745346783, "uuid": "3a0ff092-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.255.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745298962, "uuid": "e2a63531-1f38-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.5.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745356683, "uuid": "469d8618-1fbf-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.77.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745298782, "uuid": "774a7b98-1f38-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.75.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745316842, "uuid": "83f31b3b-1f62-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.195.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745288883, "uuid": "6a9b776e-1f21-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.245.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745313362, "uuid": "6943f45a-1f5a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.97.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745305023, "uuid": "fee4f7e9-1f46-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.169.99.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "349bcb09-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.172.50.67", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334543, "uuid": "ba44b04a-1f8b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.80.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745286723, "uuid": "63164fd4-1f1c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.191.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745316003, "uuid": "8f780529-1f60-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.197.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291404, "uuid": "493ef743-1f27-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.244.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745312882, "uuid": "4b6349bc-1f59-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.102.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333762, "uuid": "e8825c4a-1f89-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.155.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745363583, "uuid": "57765654-1fcf-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.198.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "3496d8d6-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.235.115.25", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333463, "uuid": "36776635-1f89-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.1.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745359443, "uuid": "b39b9404-1fc5-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.169.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745329443, "uuid": "da426536-1f7f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.7.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745365623, "uuid": "17720123-1fd4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.40.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300943, "uuid": "7f10be29-1f3d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.16.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745311804, "uuid": "c885ed0b-1f56-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.252.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745335804, "uuid": "aa17a26f-1f8e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.72.252.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280183, "uuid": "28f6f78b-1f0d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.5.0.174", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "348d0f35-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.233.151.168", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "348e2011-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "152.173.219.205", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347564, "uuid": "0b29a285-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "160.250.180.208", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "34984962-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "160.3.130.97", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745329263, "uuid": "6f39b8ae-1f7f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.95.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745318342, "uuid": "02023f24-1f66-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "170.78.39.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291043, "uuid": "7236be64-1f26-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.107.1.79", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745330642, "uuid": "a5421aec-1f82-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.5.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301423, "uuid": "9d04bf0d-1f3e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.78.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745337662, "uuid": "fd4ffda9-1f92-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.87.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "348f21b6-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.79.156.34", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745323804, "uuid": "b91cdd09-1f72-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.124.195.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333822, "uuid": "0caaf27b-1f8a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.102.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "34993ff6-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.160.15.235", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280183, "uuid": "28f6fd39-1f0d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.3.154", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745311262, "uuid": "85b168f9-1f55-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.192.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745349122, "uuid": "ac417fb3-1fad-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.75.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745344983, "uuid": "091885f1-1fa4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.83.25", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745338323, "uuid": "873cf3b0-1f94-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.49.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745312643, "uuid": "bc9eb27e-1f58-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.79.118", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745283003, "uuid": "ba0659d5-1f13-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.143.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745286362, "uuid": "8c5980b2-1f1b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.58.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745282943, "uuid": "967e330b-1f13-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.115.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745309463, "uuid": "5566cdb1-1f51-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.220.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745342583, "uuid": "72551a7c-1f9e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.233.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347382, "uuid": "9f1c3601-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.234.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334482, "uuid": "9603e826-1f8b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.223.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745289903, "uuid": "cb130d2d-1f23-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.137.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745361363, "uuid": "2c720efd-1fca-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.112.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745325963, "uuid": "c072b24e-1f77-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.125.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745298663, "uuid": "2ffb6a74-1f38-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.222.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745344983, "uuid": "09189f4e-1fa4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.69.114", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745322361, "uuid": "5d7939b7-1f6f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.240.203.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745289663, "uuid": "3ba571ed-1f23-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.46.84.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745285161, "uuid": "c073eaee-1f18-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.10.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745350502, "uuid": "e2da6636-1fb0-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.84.138.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348043, "uuid": "2928f33b-1fab-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "187.170.248.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "348c87bc-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "187.45.102.38", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745289064, "uuid": "d66b3d3d-1f21-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "187.86.106.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "348f82ea-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.243.36.33", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280242, "uuid": "4c951772-1f0d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.10.159.34", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745312643, "uuid": "bc9ea91e-1f58-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.10.169.22", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "348cb4ca-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.187.12.57", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "348c9fe0-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.143.12.88", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745323443, "uuid": "e21f7fe2-1f71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.148.58.226", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745323443, "uuid": "e21f8317-1f71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.66.164.42", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "348df22d-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "212.184.143.175", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347323, "uuid": "7bb5a90b-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "217.18.210.168", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745284142, "uuid": "61362063-1f16-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.175.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745337363, "uuid": "4b4158c4-1f92-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.34.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745312643, "uuid": "bc9ea618-1f58-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.161.160.151", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745300523, "uuid": "8481a6b8-1f3c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.3.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745325903, "uuid": "9c9b5cac-1f77-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.8.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745314443, "uuid": "edbe6cb5-1f5c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.136.127.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745288823, "uuid": "4723556d-1f21-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.237.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355483, "uuid": "7b972a78-1fbc-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.221.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745292303, "uuid": "6177fd20-1f29-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.244.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745302023, "uuid": "02e2ca8c-1f40-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.247.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347803, "uuid": "99da20a9-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.208.112.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745348463, "uuid": "2313970c-1fac-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "23.27.143.73", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341922, "uuid": "e8ce9811-1f9c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.242.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745294883, "uuid": "62e64610-1f2f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.82.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355543, "uuid": "9f584b09-1fbc-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.63.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745313063, "uuid": "b726ebb2-1f59-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.87.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ecd77823-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "35fas.cracsiu.com" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745283603, "uuid": "1fc943ce-1f15-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.22.64.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745323443, "uuid": "e21f32cb-1f71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.52.252.233", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745305443, "uuid": "f91c9d80-1f47-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.59.109.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745319724, "uuid": "395668bb-1f69-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.73.161.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ecc392d6-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.32.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291704, "uuid": "fc0328d4-1f27-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.81.22.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745321584, "uuid": "8deed353-1f6d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.87.28.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745294942, "uuid": "868eb3b6-1f2f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.151.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "349b2751-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.146.67.125", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "348cebb7-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.146.70.218", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745281863, "uuid": "129cab2c-1f11-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.212.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745320383, "uuid": "c2042f4f-1f6a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.194.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745354582, "uuid": "62c18352-1fba-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.238.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301843, "uuid": "974fb2a8-1f3f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.65.240", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745349543, "uuid": "a70ae225-1fae-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.67.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745341082, "uuid": "f4099eac-1f9a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.157.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745308924, "uuid": "14313d09-1f50-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.174.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745326383, "uuid": "ba910f76-1f78-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.176.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745346604, "uuid": "cf1e6a0a-1fa7-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.206.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745293683, "uuid": "97c9f80a-1f2c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.40.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745358123, "uuid": "a11d4e66-1fc2-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.45.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355783, "uuid": "2e676a1f-1fbd-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.34.146", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745322963, "uuid": "c414c794-1f70-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.101.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745319543, "uuid": "cdd8c1ec-1f68-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.137.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745286483, "uuid": "d4588079-1f1b-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.234.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745318642, "uuid": "b4bd28bb-1f66-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.73.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355723, "uuid": "0ab947ab-1fbd-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.180.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745351943, "uuid": "3d79e0c0-1fb4-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.53.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745304183, "uuid": "0a1ce225-1f45-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.250.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355783, "uuid": "2e674f57-1fbd-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.52.122.169", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745346422, "uuid": "62ea2a10-1fa7-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.139.97.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745356563, "uuid": "ff14af28-1fbe-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.106.146", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745324583, "uuid": "89a008f0-1f74-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.174.91.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745323443, "uuid": "e21ee23a-1f71-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.178.151.68", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745323563, "uuid": "299b7be4-1f72-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.127.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745336222, "uuid": "a35a1eb6-1f8f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.151.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745306582, "uuid": "a07afdb0-1f4a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.155.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745296682, "uuid": "939bedd3-1f33-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.96.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745296922, "uuid": "228c2d71-1f34-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.121.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745294942, "uuid": "868ebdcf-1f2f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.121.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301243, "uuid": "31d23167-1f3e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.131.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745304723, "uuid": "4becf968-1f46-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.115.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745325903, "uuid": "9c9b5a20-1f77-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.133.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745317023, "uuid": "ef67f234-1f62-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.142.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745294343, "uuid": "2102a797-1f2e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.147.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745321762, "uuid": "f809c15e-1f6d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.152.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745335682, "uuid": "6158452d-1f8e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.2.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745284743, "uuid": "c716db1f-1f17-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.34.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745318223, "uuid": "ba96ec77-1f65-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.45.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745304723, "uuid": "4becd173-1f46-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.91.161.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745361963, "uuid": "91cfb944-1fcb-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.83.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745285523, "uuid": "97dc90ca-1f19-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.123.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745314563, "uuid": "3556e613-1f5d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.64.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745342463, "uuid": "2aebc553-1f9e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.76.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334662, "uuid": "00fc8e97-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.140.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745342822, "uuid": "01322802-1f9f-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.140.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745339583, "uuid": "76344031-1f97-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.185.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745338803, "uuid": "a5b69570-1f95-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.243.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745350502, "uuid": "e2da833f-1fb0-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.248.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745291043, "uuid": "72365f0a-1f26-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.252.188", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745338263, "uuid": "635594cf-1f94-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.253.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352423, "uuid": "5b77b01a-1fb5-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.201.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745323804, "uuid": "b91cf7bd-1f72-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.99.206.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745283483, "uuid": "d83cc80e-1f14-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.216.236.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745301362, "uuid": "78b52d92-1f3e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.239.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745282883, "uuid": "72446ccf-1f13-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.19.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745284204, "uuid": "85aee3b7-1f16-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.216.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745352423, "uuid": "5b77cba7-1fb5-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.141.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745309283, "uuid": "ea0e0d6d-1f50-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.21.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745294343, "uuid": "2102aabf-1f2e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.215.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745305803, "uuid": "cfe2e475-1f48-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.93.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745290862, "uuid": "06546fcb-1f26-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.106.66.149", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "27a4e5c7-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.60.226.243", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299503, "uuid": "24fe6367-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.60.226.244", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299503, "uuid": "2506ae5a-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.60.226.248", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299508, "uuid": "2789a03a-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.60.226.249", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299503, "uuid": "2507489d-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.60.226.251", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299506, "uuid": "2659cdfc-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.60.226.253", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745298843, "uuid": "9b752396-1f38-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.242.76.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745287743, "uuid": "c362378f-1f1e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "75.127.7.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745340543, "uuid": "b26f3cc9-1f99-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "76.72.238.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745280422, "uuid": "b7eab1ef-1f0d-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "76.72.238.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745328961, "uuid": "bb644b5e-1f7e-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "76.8.205.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "34977b58-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.12.112.112", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "348f9db9-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.157.28.92", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745334723, "uuid": "2555eb0d-1f8c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.24.200.71", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "3499ff7e-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.224.148.152", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "348dbab9-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.224.149.173", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "349aaf44-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.224.151.255", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "3497bf8f-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.238.213.218", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "348cb9ad-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.18.190.234", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "eced70e6-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "8vq.allaeima.com" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347204, "uuid": "348dcb7d-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.117.196.202", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299623, "uuid": "6c2ff3a2-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "alert.gandizon.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347445, "uuid": "c435f068-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "beyondlifeofmine.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347983, "uuid": "04f6db02-1fab-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "bigfish.lovestoblog.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333105, "uuid": "6122c27c-1f88-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "biteblob.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347443, "uuid": "c37a3c6b-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "booking-refguestitem-09064111.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299627, "uuid": "6ec7e319-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "bookinterpagecen.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355903, "uuid": "7622cf84-1fbd-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "buqoc.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347091, "uuid": "f151aa81-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "bxozc.brazenf.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299623, "uuid": "6c2b7310-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "canv.gandizon.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333103, "uuid": "6006cc7d-1f88-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "catering.com.pt" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299623, "uuid": "6c43a926-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cdn-mehj-assets.s3.pl-waw.scw.cloud" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299623, "uuid": "6c294f29-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloud.gandizon.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347084, "uuid": "ed295697-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloudservicesexecelsmontumda.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333103, "uuid": "5ff8a4ab-1f88-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cm9iuupni00010cjy3657dsol.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299623, "uuid": "6c5c9c27-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "control.gandizon.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347090, "uuid": "f0b94a18-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpanel.edistrami.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745316305, "uuid": "43c37afa-1f61-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpanel.freein-deed.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347084, "uuid": "ed2875dc-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpanel.keystonestratgy.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347084, "uuid": "ed0a3531-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpanel.landoradebalthazar.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347084, "uuid": "ed3ed99a-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpanel.quixotic4.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347090, "uuid": "f0a51ce0-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpanel.tyamile.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ecfa69f9-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpcalendars.7ntneg.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ecf54e99-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpcalendars.borubon-online.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347084, "uuid": "ed32f77e-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpcalendars.brazenf.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347088, "uuid": "efc13092-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpcalendars.landoradebalthazar.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ecfb09cd-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpcalendars.mondial-ae.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ece74da7-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpcalendars.ralvinetp.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347088, "uuid": "efc12874-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpcontacts.abandone.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347084, "uuid": "ed1b06db-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpcontacts.ealacrity.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347085, "uuid": "ee2227d6-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpcontacts.nateleybo.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347084, "uuid": "ed097768-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cpcontacts.sinoceancn.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299507, "uuid": "27827f11-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "cstor.nn2.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347443, "uuid": "c314d191-1fa9-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "demopark.com.tr" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299623, "uuid": "6c22de38-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev.gandizon.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299623, "uuid": "6c2d2e7c-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "docs.gandizon.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333104, "uuid": "60592d3e-1f88-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "docs2025.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333103, "uuid": "60133e67-1f88-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "fuckhdmov.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299623, "uuid": "6c2ce395-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "full.gandizon.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299623, "uuid": "6c2e91ba-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "gga.gandizon.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ecfc76f0-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "imvocky.gay.global.prod.fastly.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333103, "uuid": "603dc15c-1f88-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "itradepay.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299623, "uuid": "6c291749-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "jsec.gandizon.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299623, "uuid": "6c29a20f-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "k-dev.gandizon.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ecd8e634-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail.asnako.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "eced2979-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail.auiesce.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347084, "uuid": "ed0c8c9f-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail.ealacrity.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ecdb95e4-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail.eighlereg.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347091, "uuid": "f1497d2a-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail.ewsaustraila.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347091, "uuid": "f13e694e-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail.gdocudrive.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ecedefcf-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail.novapnagaea.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ecfb9b5a-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail.ratrislio.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347087, "uuid": "eefa55ee-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail.trioneyev.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ecf74609-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "mail.webbrewentzel.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299623, "uuid": "6c3e6f34-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "roast.gandizon.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299623, "uuid": "6c555791-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "sec.gandizon.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745337964, "uuid": "b1890691-1f93-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "secure.gatecollegesystem.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745333104, "uuid": "6084ac09-1f88-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "spectrumwireless.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745299623, "uuid": "6c2cf478-1f3a-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "stuff.gandizon.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745355963, "uuid": "99a7e933-1fbd-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "vaboz.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745307243, "uuid": "2a5ed58a-1f4c-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "vynen.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347803, "uuid": "99e9bdfa-1faa-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "watitoto6login.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347084, "uuid": "ed09a07a-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "webdisk.cutterenergysolutions.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ece5f595-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "webdisk.enfamxb.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ece572b2-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "webdisk.tyamile.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ed03df9b-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "webdisk.vega101.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347090, "uuid": "f0f6bc2f-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "webmail.aaoun.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ecd62855-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "webmail.lamperll.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347090, "uuid": "f129f79b-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "webmail.mercuirusint.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347090, "uuid": "f1056b79-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "webmail.mondial-ae.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347087, "uuid": "eee3b6ca-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "webmail.qualityglobal.wiki" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ecd38c96-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.alva-technology.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347087, "uuid": "eef39590-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.cloudservicesexecelsmontumda.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ecf9be6b-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.constructionproject.cc" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347084, "uuid": "ed05cfc4-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.cutterenergysolutions.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347085, "uuid": "edd153ef-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.danfsos.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ed00c345-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.greenmountain-no.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "eceebe77-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.legacyplatformfile.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ecd9b550-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.ormoncion.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ecdb6176-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.sialtysic.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347083, "uuid": "ecee07bd-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.vega101.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347084, "uuid": "ed3e4edc-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.vorynexa.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1745347084, "uuid": "ed431603-1fa8-11f0-82df-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.wetllands.co" } ] } }